<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1932">
<package pkgid="f472673f8fb40ee516e0f760aa3f150b5540a42cfc4214188ee52baf155d610a" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="5d2cc17d196766895528555989266c293761008da7d6e73a8d5b775b7438e551" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="05366367a268546eff80df8db45a7a3e451a562ec6d9abb14b0892e22d5a4cdd" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="dfa262f6893e099a460c290fa6a9abd51c83de6075fb714af9578e6102713a08" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="a540cfffc046b0f280aec9c8036865c9c2ecd0b4f230bae44845075eb8cd468a" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="1bf12a7f9dd11f1bb45180ccde4d0eac968fc05fe0132ee69b9778ef1dea771a" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="2c60f0c0e63b39d3ef0607ced93bea06f89d80910b2a4c45b2455e101fa22612" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="7ccf995f859e299071adbe8630b085456c6cb2e6cb1a2947065c817612acf3d7" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="8f5d2c7320552062956620af317ed8d14334914a3b76cc2e56a0c619e1cfd373" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="87c8541e33a80c509a068608bfd054980be528907caca17012e61b8fc95fe27e" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="3201ac598370dfcf26531816fd91fb5da22738de95146e979561609d9e8556da" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="0dfb32bfcf75b136cc4d4122bee9ade904417459992253df0c6742f4fce8f334" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="0771297c6bd7d40556aceedd04979386e08cbfccf248c4b52cc70a70cb9484dd" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="6c19854e8267d2ccbedd1463a65bf0f9d508f5b43e008a3f90afa03e345e971e" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="6599c0fc1a00a395b24c62b751de6c8445670d83c8021959adfb3ec27dea99c8" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="e14aba4635901ff22327f2d94f21709dcbb14b705c42fb21a6705ebc36977aec" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="53dab9a651d57ac0d34c447ccd34da3ca7e086b621d71212a54a46b44b688e35" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="dff9155b7225d4ca2019cfd4814f4f8dcf1c1df09c690d12fe3f8e6217a93f11" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="0243731e6da0e77103024ea23be13c991f9e78bf78f743e010acbd2e0c30cdae" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="df2df573d4968cd2e0967ba5009402bdf2ad2f51e61c092af6793da73d69c0fd" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="9c5e571c848445152814b11a2da4e7aea16d2c4fa4a3957c56da44b6936e3210" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="5330fba8c0e6417cc6da01dadb769b937c820c3258a3db82d2924d3cecf6f662" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="0b636ae7f7377ec32977a1b8b637ed7f54ab861a45aff609935170fcd600b222" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="24da22d5473b3a1664b51f53fae298ab5473272b7fba2ae3c898621055de2770" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="9591116de6dec0294e4765f9d958adce4775b79b4119ce8737cb4bce369c3182" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="2151c7e70b1e713ef356688d1f52b51be5a0efb4b48936fb5137c726f6d5c040" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="b0caa9525dd237b2f5457512b60011d4e2d0cd0f53ea1f617e440a519f7960e3" name="NetworkManager" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="84b7f1f8a6a8e499683eb1f48d049b8471b940ddb939982b5d029406ae754dd3" name="NetworkManager-adsl" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="500af765eff3a4fba225f9d70767f43956a3d91de5100610439693d32d1ff10d" name="NetworkManager-bluetooth" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="906c225a7915e7c6bffa0130f4c3d9c9a5eaa96cb6fe1148200a1a140bd9f371" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="9c0cd87436c7eb9343bd2cb8f5a21cded5858298021652781d0d606cfb7570e8" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="2ced20e8b995b06b83e8c83f2e7fc8b937d21896b1acbf65974d4ac69cf2b6e5" name="NetworkManager-glib" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="f560aa002d115188f37997417eede2b78051b26228dfc43581b11aa6983ac452" name="NetworkManager-glib-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="edb2300d684a824ebf0737fbe7be3e43ab56165c95dc2c9451e901d8b6273ab3" name="NetworkManager-libnm" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="75920d2c209c84b962120a9e61e4cb62b7ce3dc579b9bc34607f612eae13af3f" name="NetworkManager-libnm-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="12705fcb19c5a88660a59f91bbeb1485cfbfa85924d7a7f473b23333b9f67cb5" name="NetworkManager-ppp" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="de1414d6416473dee3e2bf554b79e36d0bcca48cccecff1b739fe6052a2b2338" name="NetworkManager-team" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="8d4d92081ca78420fee060e76316ae574b8e6a3dc9f3769ddd71690a97144957" name="NetworkManager-tui" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="6dfad1997430fec9d7c7ed83e21ec7dee263c5be0981e815b1621e76d3384ea1" name="NetworkManager-wifi" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="d10b33f3ac2bba97e567c00ea8ff9c3fb4413331ea122377c8139cdf91e01121" name="NetworkManager-wwan" arch="ppc64le">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="b8e2357e9e81e481b74e551d217264dd0a2e11ebff1689976351370109f8e8bf" name="accountsservice" arch="ppc64le">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="5dc4ee64cc84e25c1175f4757a34072440bcc88244a20c167d8045f0032d0fdc" name="accountsservice-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="0f053678320684c4760abe1d059ef75e9daf0dea985bd9ac49b9cca47f3f73fe" name="accountsservice-libs" arch="ppc64le">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="b3bf98bb33dbe84d70636fc081bdf4c86730329087c646188787619fce2d9c9d" name="apr" arch="ppc64le">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="262facdc881e4a139a7dd2b38a720d31d94649fbff4dd10f20341b21f31ff707" name="apr-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="3964d36c63563d523c44ed59d2b6b36e15eda02c403e6befde12d2356887e68e" name="at" arch="ppc64le">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="20818b54cdf8500186ddf2dbbca1a3ad34f082d2956d9f4e43ea4b50f138789b" name="at" arch="src">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="7966ef8ef5f78ee2478b2c855f15966c66ae84354f4b6306bde7f94c9e4cd313" name="at-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="f505fe7e18bc0f54e43c66112a432a3acfca5c79e1576b8a046067b3d3ef07f5" name="at-sysvinit" arch="ppc64le">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="0d26c4565f63fabb44259a5f4fd8245fdf37765f057ad6831f5fc3fd1f18ca3c" name="augeas" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="8d9c86583dcf6ba504c06e07b9304cafa853c72c06cf0661e6192fda7d2f7af1" name="augeas" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="c56efdb1152176598db661bfc8a1be0cc5aced26af2bf1115f030e89bd7a3c76" name="augeas-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="7d5670b78900df7efae04a1107efd7e45ab2c1a751ffa32aa4fe0387c422713c" name="augeas-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="e4cc8a4abb4cd4cb3b99e3e468273efb5e82d1357a8900deee462062df7c1379" name="augeas-libs" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="43bd47945fff7a331903a794e1ee78b21aa997c0eeeb66145dbf70a83d4c02f5" name="augeas-libs" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="430f5b49e65477fc655f8c06792af39e0b724f8c00d636482ac57d85c08cc114" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="131bba4439651add403bf73deceb71136fa8803905851a5b44a77649c1f7f8b5" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="135f8646b054be17b650d890b99ff2c8b7476fb2d8f014b305efe20aab1db438" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="52e3852985bf2bc9c1774d0c3c6e926a0ab43107b4f5357f16eb2dffd88a0d8b" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="878d687d1b41d2b6f400af73b74a7fedfb7b87174520846b06f96414ef2fead1" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6435dbf02d27807a6a82d9a21384502718b3eb42576ae19d9d0010729c888c8c" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="901b69e1cdea1c7a94c79e599bd4d8fbdb9475f66aa224f803820da346c88074" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c7c2852529f1977cbefe0e1c9b39fa29698eeb1098aa6ca1b780063819d31f2e" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1c731ff6eb9ba193f9763b98657f782ef1e3f372d3e0f1283e03b9b5d921dada" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0275cd5ef73a94e0662a8564340a97e35bc2cdca7eba76bc20b7350ed549fab3" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1dcb3d541d479e8842dbce1b527e31d28bf98999ebe2849e911a62d9a70712e7" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="09bc647ddfa506df047532ff5c03f435f4426dea141a4f4c2c409f9c7565e9b3" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fab73d1ce009cef0ae841898f94e03bbefd7d4f73fa853beead0460733a63d70" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d76ee39f03066cd5df6ecec24620d7c52c0bbea579b7567ad664fa37db4baaac" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="51ab893846eee98561184ddfadc1daa260364b15ce2874a39521ba24355d215c" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b4ea9c6c8b3e606659b33deb0d82269a7ad8ae31ec7a3e2036f908a34c147720" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2e5c16fb6f1d70f00b1926ec18092c1445f22c78744cb0f3f41d3add2bb1772e" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="441dbdefd6e733742eb3db9d599d3482842adb5131ad51883f6524399b1661ac" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5cf0067aee876be030ed8f15a76d119d3dc9efcfe3013faac84a59952408f99e" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5663af9c2d13c2d78fb8ec9b80efa74999ed14fc2f9f2cab46bc6e0983a81a3a" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f0f8b20c91d1826a10e60706d3abe8a28fd223f63cbfc7dfc7198b7ddd9f6629" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6087021d71e00f7d5d9c77b7e9f6a0cd19feba35f715c2f384108e904e67e603" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="efa9d7f29a0e2a0be194353e387ef0ef75bee984d0676de20a744579f272b2f3" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ee9a5c768e3c189561ec038098f6e93ed95f15627d8321476efe26b122eebeef" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="77dd347cfa2be7ff09117e7e3f09fde52ab968629bec3eb0ef02e87f6581bd09" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="638f8807d055bdec16e1356232c488a946aafd018f173fb6319f679480d968d6" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="65841d24be13bc11efc2d2ffe85e7dd699b366bf14d2b95e6e1f285234714824" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ffc86f7ed9793978a467d7ac27905a22da0cc4e340759de4744f07d3bb752bf6" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8738b5e133bd1f1f49ccceb537c19e68c19b9c24a858fc16eb6539c548722f53" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f456e8c4c9971f2e708f9719ce1fd4e9a67e2ef69cb7fe735af94f573a17c75e" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dd91fdcfa10ae2622808b456c8ab589216f1b364f633cf2e7ca054290210684c" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dbdd9173d7ff18c49e398fd334c98126cd01403b474355eeace385ebbd7ba827" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7362fc1e7c502b0a8c617d30f78a11e0e8f8056f63dd9162f6f75e7f6fadf8ca" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="aad119da035831fb62437e610fe29bec9ed1f25cb4f49ba6a9c7673d733b9dbb" name="autofs" arch="ppc64le">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="a88909c276cf7d928cf0c99322a668da49971098c31f7359ecd5fafee7656965" name="autofs" arch="ppc64le">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="a46ffe84da2ef7b4a422453ae5a76f75c16e1ac098ed1e7828894fa946495729" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="6d6cca94858938c8b3affc0bae57cdb324570ffeb85912f21359777469b243cd" name="autofs-debuginfo" arch="ppc64le">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="3ed52520650bed18e5cd49a600c17c2a964f59eff64437750d1102317464cbde" name="bash" arch="ppc64le">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="fa86f01e9b1f131f5e909dc75ffaad0ae26f92699aa77db0a77cf5f3b6fe15ed" name="bash-doc" arch="ppc64le">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="b1ee5fcba41ddb384438d1ee0e6e5d0ff94b09dd75e4aeacb7f6cc740895b32b" name="bind" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="a70a61d6c925d2d1a231068fcbee2985a77d7927c86a19799f177de9ae985b57" name="bind" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="fda55c566c5098f36ce55b56c8b08457f396fa7122dc1cec65375d91fd59f43f" name="bind" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="01fa31d147245a6aeeadb7bf8c2f975ea28e23f3cdd188f063892770045fec2c" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="a9474644005d9fa57ec63e0457aa0267dbfd7f482433125ca04f63ff48db200b" name="bind-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="4d4d785a82113d93be5beb4222f8d9ecee4954dc6bb592614b1bcde0717e2bb4" name="bind-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="1f7b877767a0e579f4bcda5f46aef80039ba5dd05bb0baac3b956fe5594ef127" name="bind-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="37b35f7471854d8efd05e03b197d6d948ffe2b0899d42a40ea1a7c9a1fe6bc71" name="bind-debuginfo" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="3947e8b0ea58d8e2ce4203b2f9ebcab72b04efe06b1fdf43266f6fb12c67c9b3" name="bind-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="27f025abe58d45fb7408784fc8dc3d126b6b48b7ff06d1f1aad6e010d92c1d3c" name="bind-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="eab9cd08e3176d90df16ec45751abb02af814f435409ab894304b47408315e32" name="bind-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="9fc7942ceb0ff0d0e04e744d33a79dda86dad15e75be66755e00dc38755c7d6b" name="bind-dyndb-ldap" arch="ppc64le">
  <version epoch="0" ver="11.1" rel="4.el7"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 9.0-1" date="1463054400">- update to latest upstream version
- related: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-1" date="1466510400">- update to latest upstream version
- resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-2" date="1469620800">- resolves: #1359220 prevent crash while reloading previously invalid
  but now valid DNS zone</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-3" date="1469707200">- rebuild against redhat-rpm-config-9.1.0-71.el7 to fix /usr/share/doc naming
- related: #1057327</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469984 required bind version doesn't have the dyndb interface</changelog>
</package>
<package pkgid="7068291f530641de125878de48095ddcd67bc12520a6bded16da7e884cf657a1" name="bind-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="09e8b15a6d94e5180206f1ed3c3b0b7788da12d347bac1a121a9bcba606e8f64" name="bind-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="66f710c9626b8686ad568d90708cc8320ff501809f85e528a196fcb03fdf3cd8" name="bind-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="5262dc20232ae2ff628fbf698c1ea9c01657639a456ee9e747cb0f3ba7cb3bc3" name="bind-libs-lite" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="2142a14d6bf91cc1e94cf8bd47355c12d8b2dbd1518eaef6745ef389851d55a8" name="bind-libs-lite" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="08a2ed6b938b907ca5f878efcfcd17fb0abe132543e643507288f960125fd05e" name="bind-libs-lite" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="88012038d30a8c2af898e885e857753a2a6dcae2a24b37e78233b2a5cf2faae3" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="91ad4265530da8d5a8ab347bc9e848bb6ae64645b914d76921fe159024be237a" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="6cfdcae57095a9d458fc7e9d1b548fd87e4099344138ce5f64c669f2376e2a57" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="6c0b65804e121ab96ecc4c74ca99a3db7c7b82c91bf6d4f88e6917a39b6f36da" name="bind-lite-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="5676492bdfdba7e73cb8b92aaf2b3eb971287407d043c67f0fec09db410fe26e" name="bind-lite-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="b2f71413c388c60cfe0ef77b4c039cbb673a1f0092b7a5fa2ff5da996e50a01b" name="bind-lite-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="3b800bf69059ef5daedcd7b668076c56f4ec277bf32c3d62861f9eba5a8f8269" name="bind-pkcs11" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="0efc62589d26f5f409b2598700e7ef009f50daab9e57262a7ddaa394df190a91" name="bind-pkcs11" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="5626165f15efc3851fe42ec93b93e122693afe7247af2f2b802c161b575ab7ff" name="bind-pkcs11" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="cb329385b85a1a0e0b1464207ec1d79ad782b0d606fd1140c5a1ebc150c847b2" name="bind-pkcs11-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="fb8a6e9d08f44157a1cb6a0ac7a6c9b6141bbd8a25c034a41c7f3b0633d93135" name="bind-pkcs11-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="2b061be828839c502b18f7f63de6c04e12f597e20be8c3556f49dfd9fd87bdf5" name="bind-pkcs11-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="09a2c67163d511d63bfe8fa8000fe4c10be0695cf4cd4749d35370e302f04c3e" name="bind-pkcs11-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="79b44e4df362cc38f8de77dad8c75018f663361e3f79c7e64f396713dad9fe8b" name="bind-pkcs11-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="471897b34f19be803eb5f8a13fdba8f4a49ae5e8e45bd6d2958d4d53d597b5aa" name="bind-pkcs11-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="6cffaaef4caa96b8bbdff8483e7b94c3ba3d68d635b682c1cc092c4d04b3ca9f" name="bind-pkcs11-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="31cc469f4d8c418da1712f6997ee3d58f54a4b52168daa6bb20cb20d31b097f5" name="bind-pkcs11-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="8d7e13eb76d2fa1cdbb51290d17c6c4c9a5738c4e03cd95d7b4b6013000c2750" name="bind-pkcs11-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="9f536aeadc76ec6e5f0f5b717bf4e5d95ffe7b8feb5f8280d897d7c0608c79cf" name="bind-sdb" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="2dfed93a2cc46f04261b402891847b9230bcc0db70bad8c35f200416f65d422e" name="bind-sdb" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="a3750780065cc74cd38db8ced3d5fbac8d2952866c7fd6d544be62bbc3c986b5" name="bind-sdb" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="4cfe63d327b75ad0aa923fad300b3d3b9449f830d340d6e64280192f66d80a8a" name="bind-sdb-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="e7f39dc1e3b1dfca20bf68845d053a07f749a786368f467b158927d00542ff7f" name="bind-sdb-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="985b3fc052ab87b674deef1d724d1a5a05973384507557c57fdf54de33f88bba" name="bind-sdb-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="1b9478fc0e1d5511cad897d2647738694210a355953387d219f37f432f3d304c" name="bind-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="40e936f5c38842e37f508543a4f7769279a1c40932e033cf83c1a0c2129288f3" name="bind-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="698db3bab6c6ef41a69f3961212722016dba79bd0b765dd443d233c7c3d7d35d" name="bind-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="89d165c66ddd420e9a3feb712276868884b11217e4abe3e56bf220db39742a3b" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="cfe6ae5b5dcdfc0169132280f3d0b07a9c480f15269dc2f73180b1bc02fbe649" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="aeec417e6309179be2f5390405b3d50fafa06c41de8bd396c6fbd30bf93d1073" name="binutils" arch="src">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="a9ca4e01a9ab63b11fc75bb32afcb8b5079e01990d5e7cb889c1de67caf78ebd" name="binutils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="54643ba57029414dadd7c151fdcc918e17bc078dfa9b24e77f250522fd6d6c61" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="4c53f544d09e683c8776a2a48ab99efdc3a3753bdc0133fe437bdc441f7a440b" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="4edac42fd8f2c237baf1161d0cbbf1492c2e9155809b02d5cbe97f445545d909" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="b655b58041ea1f0c8a47e75f4b36c83dd2a61f498020c02a094f05e77b097c7b" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="666c282b93672a4aace4f2395752302f238d6ef2460cf12641baec6c1560b638" name="bluez-hid2hci" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="411cf66b1ae875901840bc84f62965d159dd2696ed2e460bf21637ec3a057ddf" name="bluez-libs" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="7627fa29d093bb91dbb42e9c38954ff91f6c3f6f8e9f3607bf3e5da61b422daf" name="bluez-libs-devel" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="a85229ddea0b650c26edb941f61364dee6d7a1c2278f72a15ce9e66d4488c9ca" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.1"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-2" date="1484654400">- use timeout from datasource config in openstack get_data (rhbz#1408589)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.1" date="1508414400">- Roll in CentOS Branding
- set default user to centos
- assume Red Hat compatibility</changelog>
</package>
<package pkgid="d1735f15fe855313d831b54778b75f87590420aab1968772ba67340d63c90de6" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.7.9-9.2" date="1516881600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4fe278d26e05683c1943aa297fb724622175c05d334f1121d1c474d35a5a4295" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.7.9-9.2" date="1516881600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="741fc24c98842577d8686e34ac095ea2b5e35988a1d37de437bc2cf29796d013" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.6"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.3" date="1516622400">- Disable NetworkManager management of resolv.conf if nameservers
  are specified by configuration.
  Resolves: rhbz#1537439</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.4" date="1517313600">- sysconfig: Fix rendering of default gateway for ipv4
  Resolves: rhbz#1540094
- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1540093</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.5" date="1517572800">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1540094</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.6" date="1518696000">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1545525</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.6" date="1520424000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="cde212ab35e74b36801b884e163a6aa1e7fc1ab129e12a594edcbf41a9bcb10d" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.6"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.3" date="1516622400">- Disable NetworkManager management of resolv.conf if nameservers
  are specified by configuration.
  Resolves: rhbz#1537439</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.4" date="1517313600">- sysconfig: Fix rendering of default gateway for ipv4
  Resolves: rhbz#1540094
- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1540093</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.5" date="1517572800">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1540094</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.6" date="1518696000">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1545525</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.6" date="1520424000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e830235ba5b98fe768b97b02d74d0d0935edc7b98bd85062db4a98be7e25e022" name="cockpit" arch="ppc64le">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="cca0a9aa87112db3f0e71ad8306a0eda4490aa5f8299172baab8bb16d75ed1e6" name="cockpit-bridge" arch="ppc64le">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="0755affc3b632f3b2b0d526ac8a44fcdc078e42f5875c0408f2c53e440045fe4" name="cockpit-doc" arch="ppc64le">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="e773266493cd7fe3cdcad142fabf7f133a31bb7c330a1249d29204daf7b1a49f" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="41b9ced9b1593bba59f71af237031254842781fe293cda2df630a8790cc09ec9" name="cockpit-ws" arch="ppc64le">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="81747422481fb3c2debda548c622b579ab3db6a3228ee8f3d3e64f9ba955d1ad" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="2.2" rel="5.el7_4"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1452254400">- pretrasn lua call now done in pcall (protected call)
- also posttrans now always return 0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- inital commit to rhel
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462401">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-4" date="1510833600">- added an daplied in install patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-5" date="1511265600">- adapted (added policy subdir) patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
</package>
<package pkgid="8d97bb5bd3698c388dadecaff4c569e8c32ae1144cb2f9374064fc0853a04e4c" name="corosync" arch="ppc64le">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="2dc1f5c82d022c983f0b54f2188097c4c774a5fe55ab71534c8ba5472279bcb9" name="corosync-qdevice" arch="ppc64le">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="718005033c04a9f96775f03492a20a8a2d95636b2d7f9ba85aac6d836aaf59c4" name="corosync-qnetd" arch="ppc64le">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="e2e98dbd5895eff950edd31124a55a4f4344a61281ef593eb790ee698fdfc69f" name="corosynclib" arch="ppc64le">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="49cf5c252bb50f70b9a74233927b5d8930d8ef62ba3a6f8ec9f9ff0a16a7e899" name="corosynclib-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="e2843b30a0d08243e9d7e5dba4a83895f8ab388be1309682e3c6b7cde9074cc9" name="cpio" arch="ppc64le">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="87e1d8d2ff25f088aabf9095aa9c740ad0cb8a198584e816db59a6c918938621" name="cpp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f3f35f289c6c457a27d255a3b690c4229a239a882535f7beb1955247fb9cdecf" name="cpp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="c7cf0b9dd363a6f82343972e02c6f27c817c5b0c03ac5118b61bb35205c8237a" name="cryptsetup" arch="ppc64le">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="7464b5667b10579f24d212424e71e4e632ff188a7cbe7da6b23961fdf5f82804" name="cryptsetup-devel" arch="ppc64le">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="4c5a87361315ec78585884cfe6410c0cfcf1e37cb733bc07bc7bf36ac832850c" name="cryptsetup-libs" arch="ppc64le">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="3f4a3969029e591facd95937b11346de1eed1bf42de91a90d57d6b63199fd0f8" name="cryptsetup-python" arch="ppc64le">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="ef06f26543ce4588a94aa6d81304013021b84ca2af2847e1a9ffd3948ee61cca" name="cryptsetup-reencrypt" arch="ppc64le">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="5f5123ed3bbf836475a1bc6b81dfcc1ac3a5fef9831fc1e5522f90b76afbe9b9" name="ctdb" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="0e128dbc38efcb31dbeb4de6fb424cc0673a0ce0d77f69911104566ee8731c71" name="ctdb" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="d98f5f7f6482ce0992bb2e55a990fb16f957e77fd4b575727b2b43e7e5dfcaea" name="ctdb" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="148946362109815e947e22a79b99738e0e652dd8b278032e3b1414e69ade18e5" name="ctdb-tests" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="fc12f726ebadb4b5e76ed73b19271895e22cdab52d543a53d2eaad0eac1f0227" name="ctdb-tests" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="5400e804e5be00f1f58133085799e7e7ca87ac81a013fc907c8bf390df94038b" name="ctdb-tests" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="843c8c0816bbb4f57cd079cf5ac43d21002b3eb7c8697b203596512463a8423c" name="curl" arch="ppc64le">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="364d224a0cf706bcb43111cb5559417ea4de6587acc1d1aaa35f3839ecd3d664" name="debugmode" arch="ppc64le">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="a96d68d04951ef39056c488a9d3fe0a9e68fd68681102f8e5d9fed03bee36237" name="device-mapper-multipath" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="e470a7f6984c1117b4eafe91853d1abdbb20a0fb6895c77b02e2d4006042b8ca" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="070b0468624dbc6fc4bb7a1461c4fba8e46814e5003cb7b7385f9ab494b06fa6" name="device-mapper-multipath-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="836e000996f94ad4d2902e0e89c165a2af4cb230ad9d85cd698c379554be5c0e" name="device-mapper-multipath-devel" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="4c4de308ed5756682bd69dfe3c771db9bbe550ed7953917a143cc021bdea5e49" name="device-mapper-multipath-libs" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="44fc8a45b264fa504b4c50e6256f717829306f9ab45709e134da8d8620239e14" name="device-mapper-multipath-sysvinit" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="05efffe8e2c1bbc8b493af1aaf25f7247052c5a247b08467cb8fecdeb57d6ed2" name="device-mapper-persistent-data" arch="ppc64le">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="238874c9798c950d95cc60e03e74f263833e46a3e6ca0d8c691e70bb07c306ce" name="device-mapper-persistent-data" arch="src">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="b39d2b807f2e60ca8f5f2934e98dd2d9f3aef3a4e1e8164bbcd785c2e5329c14" name="device-mapper-persistent-data-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="97cae0ea93b4bb5dd08639524e669c0795601602773ce703442aa063f1242b72" name="dhclient" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fa0b298c50e153d521a450a7a1705723279f4a0c6eff8d995871f2612f60caff" name="dhclient" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="38d9037ec2e30d8289867c1cc4b7383f0ee895b9b860b6506769d8fbddd977f0" name="dhcp" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="091962362a366694505098b3655aed20f07ba9b256e8a94cdd032d38a5881494" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e04c51e7786294c2374d70cac17b30ea76c414b146b8a8b1335214b210604500" name="dhcp" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a51f5680e16586f4cfdb4be68fb3ec54543de553f4ab4c634982090ecc7c6716" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3b5bd624b85d44bb37f78212ddef9b8c0e9448b48f0f689d838a7ab7115a7900" name="dhcp-common" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2e6e9c96449ff5bbcba906e70a94a2f7a38a32740982844a6443d72d432ac65b" name="dhcp-common" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9e109aca68c1afd8d4968c3d6d4c3b173448128a945ce04d1c24bd3c8cfbf3e0" name="dhcp-debuginfo" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4ec1d808c547ce417056fbe2c1108b35787fe131fc6b11caa2106e71675af81c" name="dhcp-debuginfo" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3c803740736c6f16413609893f7095aaff43e8db3db341c7e6fd550ce1fa6c45" name="dhcp-devel" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7bed792c9dedf19c3afc9aef15114dd170f9e1ff4d5521fd4b7b1ad16cc1beb4" name="dhcp-devel" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a99707d0c87a59b258e81d65dee506841be5a8eb80c28c762f39e034214583c7" name="dhcp-libs" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ebb1cdfbe728a1d4bb1a80e05f13629135a3c5257ba65c77a64bee5f7a94cddd" name="dhcp-libs" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a3e1b09ba3bb80c8a50a86db8803828f8b79ea1f0b03a11af12dc034b5fb50df" name="dleyna-server" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="305db8d030ae8224af0c503c59957fd9639ec7a5cdd86cc467b0abb546eddaf2" name="dnsmasq" arch="ppc64le">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="87a3a99a8f1715f07e8a27f2908dffb20a2c6c1a210b2034ac293b9f22feaeb9" name="dnsmasq-utils" arch="ppc64le">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="a79943bca81a5d9a2a2c8cf2483016a37c170973df760b2e61dca6b65f22145a" name="dracut" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="7068542c8d60de27c85c2184324bb1031e3bcdbc18015d02e3ef90977913c97b" name="dracut" arch="src">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="2315086ad715a1e5ef87f836a05671f56e3ebec0f18c6352c71a459334f20d02" name="dracut-caps" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="105e4d8a114aaef5139db0de38ac81093adc3439fbc62d61c0ac7a1886a39ea7" name="dracut-config-generic" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="06a13d842538bac08b0152cbbd612c9befa65db40e91d85cb37b131f0b73f26f" name="dracut-config-rescue" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="a5deba693151bd863c4c0d9926330e463979dd08ca22d32ca848b553770b0f9b" name="dracut-debuginfo" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="124e866fba6ef8d26946f647e4928b5a5a867e7630e3711d5c5de75264ee087a" name="dracut-fips" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="58b7c5741cf49c19db8a6654547619bda84ec59e0218875f4b1a4f94725c5c72" name="dracut-fips-aesni" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="0c87b86c2dbee0625c5be8cf871c5cb146345d585bcbe057e82baf11f0d96cd4" name="dracut-network" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="bdfe6976ac1df63f0486757e4f6aaa4a1feeb1f18780b9403bca5cce04f2a526" name="dracut-tools" arch="ppc64le">
  <version epoch="0" ver="033" rel="502.el7.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="3009c40d1104b43cac5ad8e741f1e80445cb010442281084893370bf3a5f897c" name="emacs" arch="ppc64le">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="4f82794319c571d466b12d8b0b67d0dc414c3163dca0ab1c2a4d66b1c46f4a3c" name="emacs-common" arch="ppc64le">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="a494e7928ca31b88142e2762f88a934c94e8c8bc526d3a78bc58ab706f650c08" name="emacs-el" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="2184386790f816e052c59b814ba9c5acb898161ad3cf12b5d3523536dc021bd0" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="3d6541a9ac1ec8e192d944e87ae4de235cebed946fdf5bc7267524f1c08cf3b4" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="bb79591f6f91c3b071befdfa95c15c904c3337e6cb802ea849fb4462ff9e0b3a" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="1ee2b995e0bd24379186c527664e91db042f7943dbf7edacd0111f7af4887ce3" name="emacs-mercurial" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="4c2f13d4ff39170778e694d4729720e364f2874d4c8fde325dfe6c6a068bd578" name="emacs-mercurial-el" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="8f6dd26cd4cebb59dbe931f5db1767f28b892310404402e37726298cd0a615b3" name="emacs-nox" arch="ppc64le">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="2a974431e4ae960ddd2c31f9183a22b926ebcbefbb31e51f250687e8545a01ed" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="c6de3d0496351ba22cc0be6ca933798fa110bdea09e7e856705c1aba8a87b646" name="evince" arch="ppc64le">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="ebd6faa285cdee9211c47ab9a05987dc7c61c065e15a75f86e8353edf65b6ca8" name="evince-browser-plugin" arch="ppc64le">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="bb6fbf2c9da8e67920ac37523afde282318e0a3a240b1c0a63668a96279d0b36" name="evince-devel" arch="ppc64le">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="3e4253f044a5414cc7a33c6f567150ab58c69a583bbd260c384d24949d1e66ee" name="evince-dvi" arch="ppc64le">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="6734f39bce5a30d314afd5a4424ce308f2a67386fa0d4b590e11105633beddb3" name="evince-libs" arch="ppc64le">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="53a1465f21f7e588f4047f51c2c7b29b0eff66e2de93f22d85b6941379b32642" name="evince-nautilus" arch="ppc64le">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="f79348f38d2eb0c1aedb9aa3150f87d698ae96e754cb363053aceac8774379d0" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8f39dc7323b05e05db6bb4849f1b2b7f579d983a718b0a43f187c5ffa9ec379c" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="da57670b4186abfe1f7fbcbda30e45823d9e232609ae12d4c156de11bdef8939" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="2a87adcacbce4f2921a273c619f7e8dab7d26307945bc730ba6f1137f0a7689a" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="85fc66a2a6eabbc16ec76a2e296837beb595f1ebeee72eb90ceac864997998e3" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="499d403a0ab550222bd66591b4c33182ba21ffaf15d821504b732178bd7c7905" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="1090cf514ec9dabdd93ef171e65990a2192357d48eb557683967812b52eae9ad" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="9b37a95b7447c5e7bfe76a32309817a720f026461428cf51647e94f6bad179fd" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="a1ed215ef88532fb6c546b7a93ec3f48fa9c3580a4ec5959a94a785e35f8d14d" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="22a4f314d6bccbe10bece751a6f26e81003a06f333e3d9f4a3b00e056b9e3d07" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="c8b25dddb7e41f13123df3067afa2bc0f4b4d82b606fd6c1e139388857b3bbf9" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="2ad47552647728e4c8ae207e2f4f62418b406156a070837be7891f5f9fefa201" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="05016a6af42d65ef4ee0e892c12b60dd1fe14e6a6e14fdb003db614c917231d5" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="3c70d334b49b5051fd0656ccaf13fc4b6ea5f329f3199482840959829471fb43" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="67f13e301d52003a082a5a5e48339f156ade9e0452f08802e81ddc70399c16ce" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="f6d46830ab3f18471da518c002e93d5367f58c7831f58a9e5725be1e30bdf7ae" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="101c9a72dce73cb6dae02384b119d8c607e7b1b7b0bc67db60e98965f14feba0" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="052fa27303e82dbf0cb405d46462fb6232f1c84e858ed97d492f0e977a3e9e2f" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="d1029a151004c9892c2f419a913c0d6d48fdd19691486bf2b0e5926b73920b7e" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8e2d49696e8214ff06d300410e59588e6526f566d41e9d9db9974024234cfa52" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9e6847d6046e8afaed27f257cd7d94c16f5337dcbb9457be55ce95603891a8a6" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="b7b0a3d5d842e46289d1de54222623324e9e8c123ffc3908153994190a35121d" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="492f1ceef6b07f47084f025518d1766ac96c3a27cb6a67f102b1d91fd450893c" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="bc5794c731ec9cbd567e414c862d10c72433e9c31c5b4367f03f9a94918716e9" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="90901a843d39f9ba17dd684cff3fcce16ce6764384f1f44b52e6f2f96ba1bd93" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="55c686e2b685cb0a85cab6ca5308727bcec00be8b9724ece420bb5e711fbbdfe" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="d4ceecb8c7a88767e5bd1ebd76fa21a519d65b3802e05f01011c33aa5320c748" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="6ce3cfeaab4a0e12ae5d3bafaf023de0855729bdd26031eaf4cb6b161606a63c" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="4db5819bee411d2ae8d597f86e57daa440476837536c58fff9002f2e6312e341" name="fence-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="5b711e58f9ca82663568648e47ab8db47cedb6dc8d1d132a12eac065a413815e" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="27a0ab8b83856b9cce3eafa66aa55998cb9066798e6a654387f40c285a3ae6bb" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="fd3b94158320427be4c3262dfed9867a7704c6c16e8194f5f080001ddc6c2581" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="3b28a5a3229ece3c401c9839a8f7a45b8f10ebf32b19a2ea62b63e0044aa4424" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="70cc351b64ceb44dda9983df7381b1f5048b49b532ba458be8b21b9175a982a8" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="9f80144e7249ad7744c20d5128fc83df228519293f11efa8ea8c41d18fe15af1" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="50581fee1994db61cbb49a85b13c7cabd4c123e22c14b603b57d214995505902" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="761f3afab4b8dccd8e193d6a7d7db996bb4fa6148d0e8878edc8f91a8f73b331" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="cae49d7268e46910be72e512b4ab86639f65f4f3ceaf12df003c3d1fdbfd4d6b" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="ef130f343006d1e7abd95ceded0dc3076d878a958f9c4db26d46c4559fb806a5" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="4bd991d1cec1c76325c6433fde8c517dff7dfb6af44ff432a45e824da6400131" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="9ad49f8e4d1749e8f74cbc77c9d13e55c4708f593258f3b28854b0001e045be8" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="47a301af54fada50911a2c84e9f8c6f2e424b476235f457d70249e9c4cc640fb" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="f779bd7e4e52567f02f2cf3063cc5b4db8e3b1d415ad574a76afda46f606b1e8" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="d64c558e73bb76edd05861f6190a3e3884cbedeadda2dc2dc8243ecc92d37561" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="69ad7954764f54adb4ae0081dd0f788cecf677c86962ce801f69ac1b5ceb3939" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="59c066594ecc6ebd9a7ebb2b372ec6ddaaa397458c0ecb62b7050bddcd7a1f16" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="ebf5df51c751ebb830481e02c114e63f66c4497eada52aae025c2da5ad0c783d" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="f042b648cc09cd3b1dfd1f1e0ab22c7aa47d5e0a71817268433f95411c029843" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="64fa4e8e50faa667f4dbbe4b0290e40f09edd8804896989e477fbaffd137f4e5" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="dd2d64b4ef572d4c803877c72eccfa18a40e9c0b9fef93a26756e89d6db99e23" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="cc26db40809ad2f66766be95a833243b2fdb79a3d8061242c36b807d4208a09d" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="078dc1e35c54e10703ef4a05497ae3dd6a245dda169402ff9da56e4c9b3d63fc" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="1f6b588485305549270524ae70562f3319908431a19c0905977d4af6f5208dfe" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="604688ffa325fb0fb570e0f5ec57ec58e29a97e726f8b6c0a81ce50203348ab2" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="bf7dd4bac08bb4f37daa7709994d100bfea21573a3421bd63d845956c30facdf" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="5500b1a1f79c9c6dc898b931e3533468257df4104f83ec47772d8f4bd613db5c" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="9d197ec90ae4d7cab1e53962a70592599058b3b13cea2c45093b722ccf201378" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="98c93e537a388afaed1de66101a189c7da7419782a2a0cdfb1634a31a93abcb5" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="e8173484ef5418ed8686adae53359075a74c124b75600f9d9866d1cee9da363b" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="646facf17a4ad9c0ef570b6d944053d6b8f2cedf753e52cbb580066c5c18c3ac" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9821eaacd2f58d60d008955caebb6389b5f3642cca8dc80263a0033551b1d221" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="7beceedd1dbba0ef53641d2bd45d5b913a65dd4a590479033e3e2b8ef8873b9f" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="18537911436cb4ae7e84d6c9fe2b618f4d8aa3ad219015ba3e0e9a272fe4d04c" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="cb4f4b1fe9ab7198a7b1b142fcc2f4769eecc003d8e2fc51aa36e2672bd75d05" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="5535a40fbb794750a5c9102af1afba6e8cf41e503a73fd90f94538f972793f7b" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="e9be6149251ce2f5878ac50de8b215709145d08902d1d9e0453d477b9b93f8f5" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="807c96a7d122ff5db45e94ecbb9382058ed7b97ecfdddce185713db01c1fdd68" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="6c6126e5a5ede3bda0a607476a5d5b77ab6d255e761583bf8ed6f3dcf55630ba" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="28f7863b0b4987d61bd9f99801aecef11bbeffc9cda3e4efef61632bd29be404" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9335bfd6f2fa079aa356c55e95d1b0887c407b2c9f3f9fd3083f2284bb8c8642" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="4b25caec5ec5d6c6e0b6bc05c3c812bf259c8e7be6ad35e72633f0c54fabb9f3" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8a6b53cad28beb3359c5b0a5d406a5e0d53508f2edc22dd3619144a43daab91b" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="99bea9e9124aeb8d33e6c7c4830311b6f779315603f78c1176e515d694dc53f5" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="77d85b7d91ca6d294b0de918d9b2ac546f5b49112d03f0b1712381fb7744a830" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="2ba6d968a0f66bba3080af8e95e039bf29d1616ee0fb1b34d7feb825d05b4b45" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="e56eb9c255d63dbc9bbbaefb8b7a8f7f329672671017f368a383b4666ce8f951" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="52b91613c9146456a3a6a003a2687eec61d5686e772b7aef68d4c12fddf6c5e7" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="84e9a4c25217d80d8e8af4a29323fe60894644e5bb6b00a15200e9e1228c4e3f" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="09a098d77006336408154d7f31ac3d7e3cf407a026384cffd76b35b092b3c9bf" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="bdc0b60d15ada53e3955b04a84def8a96e7a0723aac42b438608690dca5c3ed5" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="bb6b6831d0ab4ecee2b25fdb3a57dd4ac1cbf99622de02b84c3e188455fb1b4a" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="fe7029567179a57018334fdce5de1566ed7b3fda21a58922c22d7ae5b19b19b7" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="764ffb7a5d41b6c080a1bda96f92efe9b1072cfe5b51051c57096d63b7064eb1" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="80b506aaede452c3ad9fae19353b87065ce5ee0664ef3f551b842d63c9095e1d" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="23e10de2a68e2fccfa1f13548f61b57bd01946e153910892ee85c8314fadf9b6" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="04a964d032aa57565b2ebff57059566c58b0e302a2634fa8407b8029eb5d470f" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="9c514a93f664a88182d597a4186fc9122854c12eb450c8f0dafa40b92fabfca6" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="73d7a9de6c9d5614767a050677a53a1bd0e39ebbc6a9a2f120f69a2b02fff94a" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="24b6cbf83cdb7e96d19895ab872be7a90ac21ba9680b3d3069d38143b0340fd2" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="845b21b36c7a2dfceacf3449508fe7e68fa7d295142ca87c25749542bb62f106" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="b9a1941a657fd74f2ec5448122cdf16824b2560e564999fed8d0f5e7c9ada719" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="6619ad639d8f12939d3f04abed29f72854a335177ff32d2e08ca1cdf3228cbaa" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="0706591151f271d84a4bd88af900a0cb9353988c670025cde5f55631294b5874" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="1256153a4abded33e48490e1f1fb9ae32bb7f5e4886055c8375ca5c948003881" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="cd4f3d23024fb65a7306bc9a8172aa8a37209df71e5279c1d7135dcc95577462" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="d0d754cf345c59ebfd01a4daf3c0ef7fc554da24ac81e1eb0c105bbb32f98d60" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="128f868e27e246cbd48c74c27113bd90c74be01e6e0c1e64a03deb2d4e1e0306" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="8ffdb19503bc989886371d338e5c68a695094e9903cf5b3234e0c340709f6895" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="2da012ccc890ad09151dac414d5fd43a4d301cb1b330ea1c5228826c266a3600" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="412adf14dfc4ddf5afecce192879107fe3f3ad7846528ad43b466007133696ab" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="ebb12c326521237df899b3befd73dced60a64aa213059c2b618e02f1ab80b2de" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="be95c61fdecfeb0365cc64b2db007e46639a1509fbf31b9968dcb84b3d1fca85" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="f32c9d20233344d867e2e4b6bd969aaea3b3742b5f4fa4cbd2bd4b5e57735951" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="35b748d24f23c53ae1792c58c02e0a388aeb84de37b76661c61b41a115ea2ad6" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="edb55eef44a3da421519cc23f9c3a25c98eb90a4626061073349431b27b8d115" name="firefox" arch="ppc64le">
  <version epoch="0" ver="52.3.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-2" date="1503489600">- Manual Debranding after Auto Debranding failed.</changelog>
</package>
<package pkgid="761ff98bfbb794aa235cc93678d0443042ac18d86ebd6b0401eb567352108408" name="firefox" arch="ppc64le">
  <version epoch="0" ver="52.4.0" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.4.0-1" date="1506686400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e4bc325ef53a72268f4f1316fd894f90138f3b8c6741a0a1f97a7a6d1aceec86" name="firefox" arch="ppc64le">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1510920000">- Manual Debranding</changelog>
</package>
<package pkgid="0955089e7704c061e71acc5eee437d2e65d0027d378bf2a792131fe518dbae76" name="firefox" arch="ppc64le">
  <version epoch="0" ver="52.5.1" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.1-1" date="1512475200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3d3c89f388a2b1effb2d0c68d287d537b38baec36dbed85065dc9c95cfc67d9f" name="firefox" arch="ppc64le">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="dc84004ade6cc25beb4c3a6241610b59450552b6aa72095aed49191a87e59587" name="firefox" arch="src">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="134556fbfb11e8eeb69991d20bf98eca6b106e1735f024f23bc43088fd8294ca" name="firefox-debuginfo" arch="ppc64le">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="407e2da791c7d0d65aa093330803a521e8b0ba75a3438814168cd91031600add" name="flatpak" arch="ppc64le">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="f6a08ec757a5a9793a90e08872a1009f620600e93c4ba1c3b0334625bc639c8d" name="flatpak-builder" arch="ppc64le">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="16286f6d1f4671f8fcfbe333497aa0d9215c2d53e968d86a7df78f8b13d50c89" name="flatpak-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="f80cabd4f894fa9fc73e6e6ef7a38fd2a67c3054d33eb632721ecc8a3b4f7814" name="flatpak-libs" arch="ppc64le">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="78aeac0daa6e0787062ee309bd53675518f5a9825b1f2084746b4e8fc0f93def" name="freeradius" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="de98a23eb2be1cdcefcb03f3ef8b31088435ad740b30bf6a4510f088a742c294" name="freeradius-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="81d4d0fcce41d2b7c78f08c245f0e973ac45af9888700cfed2526bd482220f39" name="freeradius-doc" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="0ecdc20d24c2a71e2be21e6e2d5e18aff86653d4498ff7b82ee82207d911a959" name="freeradius-krb5" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="712c1f3558d5c515432d054893bf42428691d16bd138fcdaffe8f8287d7664fc" name="freeradius-ldap" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="220a08cad64ed9d0c92f84022132eb57da85a3191e147c21718e67762dcc87f1" name="freeradius-mysql" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="347ea869cca6a03b4574bb2fc439b3776c9f75995280b93afd0c736e880220f8" name="freeradius-perl" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="23a72a5ac2b23a17d6b06be04d80bd7f4f12f7e353d4ec9efa4b60ad39f19086" name="freeradius-postgresql" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="0fc8fda808e0a71fcddb161517feb18c393a96e93303d07013e3c3b96051672c" name="freeradius-python" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="651284136c1b1f0b96affdf66cac2315716c416dcad0e94d279eba3d82cc4d5f" name="freeradius-sqlite" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="e3fd5e7d3c5834464c775d81eec053ef6e5cc19030fd508d657111afa9c1a975" name="freeradius-unixODBC" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="76fa2f48f36f43007d1429541f26510365279ea37b4ff1d6bb097368a54779c5" name="freeradius-utils" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="a8d2cbd20ea66c3b360f78605e8a6b98cb63b504fcf88751fbb79cb6006832a7" name="gcab" arch="ppc64le">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="14337ca69a56f7c6791409bde02ea819251555b97aa70172f7cd4e05454b2929" name="gcab" arch="src">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="49c761759f821ad2c15a18634ad031988ba24f92eedd96986529bd5fd81c2d38" name="gcab-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="b88d679231426ad678a301663a5969ee4827ff27908fff7b6e3b2fa6b0b3e505" name="gcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="7ca71f06cb07cdefb491ffed99a62a069009b73fc7e2c01bdfab52da1507da06" name="gcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="0fad5d2bdeb55e8da123e287ab469f977e8bbdb76eb324f571cf4b031a4ba732" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="f251eba02a5e396eb511d6d38de978bc0c797450ba3f44eacfed923afb4760f2" name="gcc-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="cbe8c512a8b61e0372280c70649b3b48568ff590174850b639542bc70d3a7c1f" name="gcc-c++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="80d572a14cdb445695e7599610ed7f8857a15c24776d5429e47f37e94121242d" name="gcc-c++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="b199638e5592814c2d0ce4c9aa67f9b84f0d58af048396db2a028b2fee568f73" name="gcc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="a88c0f537a5ca84ea5114650431cbd4879e2453bd0eb346ef1281c961a10e922" name="gcc-gfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="4bd67f70549323550a37a146b31323e9c633032921bea88e96229c9cd0675528" name="gcc-gfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="9cb0fc618a81dd2c58741a05d75137d2965dcd445fb397358d46a7b2bfb51eb8" name="gcc-go" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="b96e1038b55935127cc30fa709597f77b93d71d1eb8a01d017ba1c86be904520" name="gcc-go" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="0c64af6ae19ff77e295af33e98cad94bf59c39787707b486fd3df8d7b307c9b4" name="gcc-objc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d2ad3adbe920b38f309f45c9ff26a80b01d6cc3e03a028d2c8b674eaf9b7c7c4" name="gcc-objc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="86f83bd68d287a391213df126706038c8acbc83e6fa4fbf73fbaa57d5652ca01" name="gcc-objc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="c57ec40ed8035e6d7cd102db3136ce089e62609082ef82584a0b471cd0ef17a2" name="gcc-objc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="30fc53dea62038e49f4626f404d041917b09ed3510712a47950b6f32a2fbde89" name="gcc-plugin-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f567446cb672fbdd0e84ffe21c8220245f4254df73cace1d8e863bb7492e6f6f" name="gcc-plugin-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="7e691a08e15775ea547c748032ef7e888828f33cd685d9ad3d9fcdec9cf31211" name="gdb" arch="ppc64le">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="b12f6b27db554429cb15df8e306290c457b73a8e1db978ccc602c9f20d6d620d" name="gdb" arch="src">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="cff2b7e1bfcc4f2f73ac87c3afd62b2946cc4c695480d5b6c436866267cff377" name="gdb-debuginfo" arch="ppc64le">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="5d79a098157819a5bafe1fcb8520c53502a235f0499148c9214ce448cd58a7a7" name="gdb-doc" arch="noarch">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="cc07fc1be501a7828e3b67070fc9154998c17a7e3f2c203a1873852f1466e358" name="gdb-gdbserver" arch="ppc64le">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="d268b17cfa3eb67d2576018f9e78b874f1237656ed52f63101796c463a6a80bf" name="gdm" arch="ppc64le">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="a4fa29e8595602b9efc22f9640ccc54d29552ccaf69a44f8b2f99d9e2e2d420a" name="gdm" arch="ppc64le">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="ba0725fb9416e1c42fb0ad7d23c17f951bd05b984b6084207824981eca3c8063" name="gdm" arch="src">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="1d00864f870986b83841117e20219197000d4313665a8f7e032bc055851b843f" name="gdm-debuginfo" arch="ppc64le">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="c0b6e67691ac489c8c7782fcd37708aad93a54db64da143fc5c3afdeaee8bc29" name="gdm-devel" arch="ppc64le">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="247e54216dbc121eed68517dbabd177908221a13cf1486ed7eb4a92b319f596c" name="gdm-devel" arch="ppc64le">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="30648d31b1aec1a921199c908b6eb45ecb826223b1722f92377bfd9c542d70c1" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="7441ec3066f9e939c311f87c8c5d77443502ddb7bf58bc40aab7ae1b7873dab6" name="ghostscript-cups" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="32b7d0282499928e134587a3a43e940c2f0b0f5f22ff10176205e018447cdb60" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="a0b815b31fb99bb86506a286676c353b38a7aea066c6316ddaecad613dbca906" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="41d0be0e14bda9728e1b7bfbf7157e314a04cf18b36f80baf45f99f91596ec81" name="ghostscript-gtk" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="9571a91eb819073c6271cd2239d632805f85e3825ae3e5e9b2b2a1c19359fae0" name="git" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="0491c668229142fcea948d50d99ad6110425b17639d9a959d1f0f0f2fdfaaa8d" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="0ea5d7502e49f57778c778ad6fda07509bff66bd79f0bda2e6beceb8a32271aa" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="f8be96995288cf41d3cd717011dcc1dd9824a043c34635bc3845122beb576e9c" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="5266b869d96878f068eec32a3fdb5342d106a0f98b96c40bcf75065ca009b20f" name="git-daemon" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="f53e59a12121a9dc2f68aa3eb27bfcbb8bb2908164418526e0e8c3b37fe933a7" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="1c103d15f78c24f0e7800e1feb29d20d5858b3a1366692eb5d65417a409e0a21" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="98b99a6df0e5edcedd8265738c011ddcc0afa17dcc53ce076060aa5f14616caa" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="c0ab3815fe1473caec4a2986058f379790b3fb1d69216368fc1076d55b8c6569" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="cf6f45e3696e7cc98e448c6615f43a77b969af2b77cc88ab9b1a98f3a24acbba" name="git-svn" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="e61d4b2d66caf07676117c4961079d4aa4b90c5803ae6b3e7dad56f522872a0a" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="26a6cdeaaa9381afe530823ecf7d5cf6425f43f22b4a0490c3a87c6038ff7c66" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="541bc2ab16be604977e9fa9726b9ed26e9d635ef2a3c0b0a7b31c56589748d49" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="590ae16a6db3609d40ef473a6e7b81f53a3cdd6ac3c71a802d187385fb3d365f" name="glibc-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="7287f2ce3504f792907504cc58eff9fcbccef019912e1a15bf82d75f398ac202" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="6d6293338aff56780bf28dcab9da31e7cb056c7b00ef4abaf73d026019fd8852" name="glibc-headers" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="ecc77a364cfedf11fb5f44fc1fa8edae726184e90311662d94c20a789e82047d" name="glibc-static" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="4af769c793607196e8c9c83f582e71fbc323fe87b9a233e1216251af8df3be23" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="efeac145f331930abb0712893d0416cc2ffec616608ef14249c191d6342db7c4" name="graphite2" arch="ppc64le">
  <version epoch="0" ver="1.3.10" rel="1.el7_3"/>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1.2.2-5" date="1387627200">- Move *.so.major symlink to main package.</changelog>
  <changelog author="Nicholas van Oudtshoorn &lt;vanoudt@gmail.com&gt; - 1.2.4-1" date="1396526400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.4-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.4-3" date="1408190400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Till Maas &lt;opensource@till.name&gt; - 1.2.4-4" date="1424520000">- Rebuilt for Fedora 23 Change
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.4-5" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.3.5-1" date="1455710400">- Resolves: rhbz#1309053 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.3.6-1" date="1456747200">- Related: rhbz#1309053 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.3.10-1" date="1456747201">- Resolves: rhbz#1472290
  CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
  CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778</changelog>
</package>
<package pkgid="1d62f270da1b455702c6a3e7d6b8e412f2421a44c71c0d84d48cb106af3ff73b" name="graphite2-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.10" rel="1.el7_3"/>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1.2.2-5" date="1387627200">- Move *.so.major symlink to main package.</changelog>
  <changelog author="Nicholas van Oudtshoorn &lt;vanoudt@gmail.com&gt; - 1.2.4-1" date="1396526400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.4-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.4-3" date="1408190400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Till Maas &lt;opensource@till.name&gt; - 1.2.4-4" date="1424520000">- Rebuilt for Fedora 23 Change
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.4-5" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.3.5-1" date="1455710400">- Resolves: rhbz#1309053 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.3.6-1" date="1456747200">- Related: rhbz#1309053 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.3.10-1" date="1456747201">- Resolves: rhbz#1472290
  CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
  CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778</changelog>
</package>
<package pkgid="754f560879e793144a07a373c43c6a792864a2bf31d00c02f59b97fa3fa05b5e" name="groovy" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="838fba5e6c1b2f7e00028b35d43f1fcd283bc536cc4ddde3fca46acf6b21da03" name="groovy-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="485fffcafa4e3e93d1f5a861fcf6f9c8943de580500495dc6cdb9762a76d0c3e" name="grub2" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="ee389998b8ff255e61b6c4bfd6f6fce09591c6e3c15044175ff550b54fdd3ae0" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="836dd90675ff6027fd61aa8f127b183910a49c252c52a2ba3edcb86dc7604d8f" name="grub2-ppc64le" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="0b87a81676118334f30a9dc218d0596bd5e81fcb3da6a9f94517e4b6b9927779" name="grub2-ppc64le-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="d761391837db240684e1ec40c4afb539fb32f26cc15b785c45bc74a40ab4fd56" name="grub2-tools" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="b19c78b7711bcc453d465c5e6303f43ce0279d2cbd21d5976992e9cd037638f0" name="grub2-tools-extra" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="37990c23d9af53f7afea645144b958121ef54be21730ab07f41ef21b4e755466" name="grub2-tools-minimal" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="d8b3617cefc8db0a2008054a715f4c3e1c3268b69edaed2c164302cd7ec0cdbb" name="gtk-update-icon-cache" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="38739ef43a3295a14e29ff8e9005683eb6c60aa7a458d6b6af5b08cdd217208f" name="gtk3" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="09cfb55d82f4b458923a42b2f278d6ea97614909dbd9cf194cebe00d221902e2" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="7b5407792f551c6a1c36b57435075be6ac6ef4cd457b1529d423be366f76b329" name="gtk3-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="c68d7558a73bf848f730906cbff72204f2468ea13b1d52e856f92763777a4fe0" name="gtk3-devel" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="5a6cfc30676607f649e34518a17b70955eb235f3d923be57c7a9f83fa7d68783" name="gtk3-devel-docs" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="57efbd24484839ea2660129dc03da9756665fa21fbe5b5b38e65a48c2439379c" name="gtk3-immodule-xim" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="4e485303db76fac85213888307f1f4f3b2b4c1d3cd200680e059705d65576671" name="gtk3-immodules" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="ffd30c48fd2ec0e59b2bbdf59c208098ad904b8b24842d77ce0088766a51d073" name="gtk3-tests" arch="ppc64le">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="2733d4a4e3e819ad71c9b50f392252638232ad8c0e34a151c4a1c79ba326fe7b" name="http-parser" arch="ppc64le">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="7fd34e8bdcb5f8af516d05983bd7fb37f5a5e9bb353c0d7ceb0bf665e3b7305c" name="http-parser-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="8029b4027d2e41c2290183669c84db8c04c287f563324208145be57365680df0" name="httpd" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="29e251c37d166310cc65315fe6c1be5746f1568958591f4658778189ca768933" name="httpd" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4316c67653fefd4e10e0f8190fe33d399bc3768e692b7f97b319fdbabe744330" name="httpd" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3be6b88a52707d50d626808782d6779d91cdb8e1e6db9b7ec49d4d7711005eb9" name="httpd-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3f4f7c371d51db293be29c7d93fdb1948e9e9f6a7ee729f0eaf6da8434737d35" name="httpd-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="01fbe4013e53f5c2237830013d8e68879d53b2fd86f4990af9a41bd1c1d51121" name="httpd-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ab5885697f28254366c86569757aa56b32018fda4b3d4575881aa42700b1ef32" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2156dda1f88729bbf47dcd000911942d122a0797d55fcfdcb65e1ead2e3601e8" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3cb7e4654d900aa6f00b5f06abbd832873938509c0fddbcfdbdbe134b1b92f8b" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1952f3ee365fc5f2697e641d3a3a1569d2fd4187e434c6a5aa2c4e8da0ce12c8" name="httpd-tools" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3dabec4f571f4f0aec3aa23ba1deb43df800780fa8e169f91c9574dd54066108" name="httpd-tools" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="96d57e037470246f2b4a2b21085e4dfa40aaef6f859a643893585181d9842cdd" name="httpd-tools" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="424a970d96dcd3482d4b938c6928c68025c8cc6aa92fcd2b43b1cecb757f523b" name="initscripts" arch="ppc64le">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="9fe90629d7e6e0a0a4988fe473a0a5d573f87a0104d0940ace0ae268bb6ad9f3" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="ee2bb464895bf88b7ea5930c154f946cbe12cf4bdd00701fab08216b42cb3d70" name="initscripts-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="b1ca1a0d65a7eff575d6c7680bb317d356271043269eb9894d98a80e6a486356" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="55b42fcbcd98762cb0fd2a208b8004cc2bea55e4113dfcebf29a8ede14e720dc" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="0f409fb5ae6d0e0eb409635e260eb3748591353e1993c3caa1eccd36fd621245" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="14bf174ea13634591c488967fa264f8a16282031f0a6ec9a605e13773917741d" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="45a083ca8541171525eddac4f85cebe30206e3b78e755adbb48ede4fef88be46" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a7f9d06a04befe71de60ffc0826d51dce70d81ec6ab761abea0e6d33bb7b6bbd" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="8b8dcda7366f8343b4c8470ce5fbd679855a63980179c76cc99ffce1dd9e0717" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="96abb01e1dc5cc4f1810b1e2bcff5d1743ed7d1c185f200e00fc22f22870c04a" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="38517d7dbf95b63ab63903765b9299058d3feeaf94f298e358b1dce1cea5c08b" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="6b52c5a4d2a55459c720f53c574b0e6710b6422b07c7fe8182178c29af457a8d" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="588a9acf3c6db57635b2a4d470e7235d12e3e22ccf08f2c4d466ee81caa67771" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="dca80a4e142157f080f930696c3cf107724f17a56d631f5380652b2a9b9e1154" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="0637a4ffc652d849854889f67f16caa848f954b59ebf8335da61d3b3cfc77d03" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="c88f4985dd59e8c23a38ce0b842d3dd66a4d62c9e54c008cb7a6bde405b73b30" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="3086927cfa5e9b69b4481ea217c405a5a839895e9b9f1ac7918301016da400d2" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="1593b8c31c74fc87509c0ae1355606eac2fe08daa8abe5bac43087fefaa1316d" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="bb8727746aaf5ca35637817828bbe62d1f8fa0a856817799db7be1ae19f6f9fb" name="iptables" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="3ac5bbe25a9f3876b715528680e2962deddbf01d70350dbcf90bb288131ae238" name="iptables" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="4819034f1e63b1865089e6591093f8c3561c08ec340bc34563a39f4c97d75ee5" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="645ee5890535cec82a9ee2efbd311f32477af12baab93780bdb55ec5fc348c45" name="iptables-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="90ed6163e5840f0d598f0cb8ce6f66f3d5a4c37d802947b70b825e7782aae5f2" name="iptables-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="46c149c8a8a93ac148eb147829f25f74980398c07f354a9d54490d1d4ed5b73d" name="iptables-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="74efc287dc085a86593914bcbfb74174621700fc81f0cc08e8170cf447504cda" name="iptables-services" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="77a43fd42c23cf0d1a051b15cb3ee983839dbdad0be96b91703f15d8b8d2f864" name="iptables-services" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="5003795d3ac6d0c93fff6f6cf396f84fbaa7393f7a657aec9b1e56454a2039ef" name="iptables-utils" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="1526e18680d30f2ea5413df220cbda7f4772488199780643a390ca045392f653" name="iptables-utils" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="edf807bb43a8f21a7b518a119573c1774be81723b63cdd2f13ba709d6d9d4926" name="ipxe-bootimgs" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="86399b8ab7ba2d7a1361d6ba730981731ad1007ae3ca300a06c640909e480bfc" name="ipxe-roms" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="4b1a6e09edfbf97466812c657aa575ae43c831e3edde47311cfe63d09997dd7c" name="ipxe-roms-qemu" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="aedf0c3378baa9a5a1d93b38a65605e7a54ebea85e0eb0501100fb91e2b1423b" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="a27ab27a8827b4051fce9dc621a5efebc46e077ecfb15f43404721d44cf382dd" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="7f1f0e04bb780dde68509469f76929af7e9874960a622482671bc9527066bb3d" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="4983b3d1fa0312f69311c51f697432bb782000860d0746cfe1724a3e5ccbd4fd" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="905df6720ff3a944d07ae6721758ee54f256a2cc4d9c4cb45a6ae42900d51011" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="23214f73fa1efba69b18add7fc3f2eca9fec45adc3fe39cbf1de685740a1f14e" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="5ce61df98f968fb9f99a543b9db61465f7a1538abe221d6718521687351eef22" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="a35afc4e4585981cecf837a570a1592e69badc25786d390c6c0b3b84086f5e95" name="java-1.7.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="de748251ca05a7e158d52660193a45a08b60a6ff1b02c7531b4f5b04e0c192bc" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="bfadec2a3bb5269a97238d8107bb150434d8337eeb47ea56c58c4be2eff6ce2a" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="847df38391374da2a01d4307f2b5850603e1c59d922356f971c93efe3bb629c8" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="950846c9479703822e9b6b2c221bb053679b168e4a249afefb5660b557f5d87c" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="ee11bb6928511e5a7500a5383cf1f894d9ef0c274da88ff4b2bb9f828697f004" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="da2e8424dba2a7da9e83d2a85a447852539e47a74b0a868f522a0643836dcb6a" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="5db9dcf575c5b0294fcbce28723f6a13451c2cf8d460b1e84a28cb0fc48e90a7" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="e8133a78cb570665eba6fccb4705f83e97cbfd285a606b7e5ef1b0b5bbde17c7" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="dcedf12f067afcc0a2b6f08b9c301f5d48928e2592f57050a488c13c392100b4" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="cace2820b0392f1dda2bc6be95616df486ebd9f5df01267fd6d8016547183560" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="3246056531b369cb2cb63e04c3457755ea64f59eaf80f071f0585e20eb2189a7" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="a5cb2b62f3c4ffd4c9a0544ef18922b9ff234b85e7e48fb455af348557891ef2" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="77687edc6b81d57ff61fed69d9a87b7fa9052863f5b55bc30a5793d8fd53a8c7" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="eaf4984ceb79dbd5c717bf1e9993cb3d5cf13b8bbfea8d615f3335b117f8ea58" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="58b504261893eac400865727ae37fa68ad8b4ef6bbb07f1ba32fd0e984d0bd98" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="20dbab862471c6419b3f7e272c882c2bfead1f24ccf5e912333d54ca99494d7e" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="5030fb1353a720e290886d3f2d7cf7847e36ba20088b02cca3ff3d8c79910ae6" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="a658ecc51b60a0163b9bfeda18e766bdc2b47938e38a1e3d8b768b89fbcb3c71" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="b7ba58d43f623544b75867613fc9e341988a90d5bb9f2c86bea3f2538958fcde" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="1457d0e0d95cfe7f01fd1100f5b705b6af22b75d347bde94f39698a71e01fbde" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="ce6ca84f61ff2aa9feb631de7ec91cb66f1967c4e7e0f53a26745de122914a48" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="c6585bb8d455b33f8c5770a44a41ab79395f27f6a2f726467df1ed11182864dd" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="28e94e7fdab15393cce0e97afc6034eb26b58060c5add643383520c125b0c57e" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="55a7ba4e37b811be4a38b111fe2e602af6cfcd49531846c90f6c74364f5a60c1" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="89d46becf000c14be20eb9002eb2181ad7cf41190a2d43ee2461c93865000850" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="23038017f74aa79bac88ef800fbdb365d513641ec082b0828b870d6a11844447" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="07b5508b0ed3543e3379d3a8427d23a8d7172aff23171a5788a7dc968313e7a0" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="afb29ba3d25b9b15bfe048ef51cd423c39728a000f1c7f961f013bda32c4c2cb" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="b8d207eb359770df262e13f59dfa3d280e3a8e6d7d43d2b7bd6db8d65f4def79" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="6a84944409f3a0a2922df8174884a2386bf955ecb65b49f6a29c447d747450c6" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="81db5fe129702108ebabf30a26652e6f8b0f0029e67ffae385b4ec356617a7c1" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="ef0b987a0eb46fa9e512ed40b504dc33fdea5a64e6ef961b81c2c9fb46f81c70" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="e2e51d69f9ada6184c0b7376e98722b09f2b67454b526c76e5d4e794208fc458" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="6b59d02d2c2ec0c307d15445a196617677c46379e5ea86bbd98d136b7ea27d0c" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="427c9fb481a73fee8481b64de2dc851ffb1f5207a06fddbc66c0a3cf68af2fa8" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="fa76ace72c31efd551483dc4468dbf194842c65f61ebe58541fc2d3ff3340113" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="7013c90eea5d25f21e1a769b0187ef03e182bbe5115fb6a9a61d4e8ddd18ac3a" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="77479f4f62fbf8d8f6bdb1c9567ee1f7f10983f14ceb374d7e9286620c5f0591" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="83f14eb56fec3d955353007fbec6c46f9e427334fafd977bdaa8431337979607" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="6fb1bfbcc1d72e1e7ec94decd547c55860bc00690b3ac8bc3df1313593e6797e" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="b15c7bc105dc51f5510f43c00ef017aef16867f1b55cd544a77e3a79da9f9031" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="2754fe5abf734495a6614a9b7676841b30328abcad9717e298890b7de3628f12" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="4a1371f5fed6df05f79c54174311183c02b1c54f258c658e007383da8da3a3b9" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="c66c279f4b00dbcdff668c984d3baf03610297d847ce2cee437ed57f72de14bc" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="a034236ecdbf1ad380778a780dc9c7faec87b3a1470e103bc719f1deba34fff0" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="c5c75f0a1e8724fedcb6bc87e6bfb58de863ea3b79ab0f2e9a4200d50b282095" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="9a49351a694f25951d705bb1f5901c6fe039811e74989b14df64c850ce421f40" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="0955a070c98944d4d63e4c14673a53d65a43ccd7063a1afcba52a97942c9c85b" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="79c504b6d03cbdae87d307c00f32d5da14fbd3a3e6631b64d29fd62e2973b361" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="7651e571108f6ab1d177a98b47c45d540bf17b6fba46fd84d20eb60ac761222b" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="f902e135cb1f39f3f068117b74878e4246963e9cbd5339344f151dec244541ad" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="2c438546d3b2a8d030f5d863c72192b914839e115963fa14ceaf5d395537958e" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="6362152318e91c8f916c3e1298d8b8de5afff6ba3cd21e2bf599d16ac71d496b" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="6071e08fcb9a7b5d28d6228875ecf6a8dbc2e71565b1f8f485ded1065270f463" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="5f3a3927611da5323ad56407d42b2a8ad9f11434ac4d53036992ed5da78c0394" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="d3f2374ec648613e47ac6f7659e7619a6b78d8b554c0406e959b1dcc85d5aa8a" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="2cc5656aac34b965daf8f37a3865f95effc1728bdad819b9b1949ece0cc0c3b3" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="2a18c5d7c0674dbe5d26708dafe6318d7fa0512d2eb8a6e523005421123ffe30" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="e5f99bcf84c51bae6d2d70dc661aac354b34fae86d299d7db2a83f8cef762794" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="180503435e03af6d3f46e2f8704fd8bf939bc071f4e6b1ba596822cf98731684" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="b54526d04d5cc3e39503f5dfcf195d90f8a4197a48bffc60b6075b12fce839ab" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="168abcc025d45a3220ce7628635ad3f8273b3a2e99a593da38225704e4784230" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="bf7d3abadfd93fb195765db1177e20d04cf6c28851d785df6feb19f0778521d6" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="caa3b489875c0755a1f102c78e8091d8db664c80cdf9a297d871f5f9401f5160" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="431eca73c3773b6c31bcced304f3dd48901dac419438b4f0721afddf899c9f32" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="623403dc9dcf3f5d0c5ee7f8e7e5a5559e275a4679cf90085271bf1972d2441e" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="b44ad8dae28e95b9d1d238d74e45e353a9caefd7c9fab7d947879754f9a6822e" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="9a8a1ebba669090e37e6cf16320c4f6e4f9f43689e1b7ad0e1f774242cdca407" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="02b334e4c307570832f29a79c98eb1152634bd3af7a2e130cfa66c661aa511ff" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="7a1bb45211d3551402c44f764351ac976bfd5dd399d164bc6e5b1a831cdd1a08" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="50d782d0bef275d01b9b5d3ca0923393598ceb5bf56643e3054c9571be2fd42a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="50a9c2d3838ad9c43f9066bf8e1665d911c2131f8f713c06a3fe5e8702053ca2" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="06a102ecf4f4802805e98f60e88610dd759fa589bf940db53b18d68ccafbbb60" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="856652752624bbeade23531349242a814260eb2eb5f6ad8523e0c2b4d60f8b11" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="175fcf9c091d7b37cf485962a40c93daa713df8a830e09e9ca349c37ad5deb21" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="bba879d906d605dc70de8d212b5220cb84699868b7346bff380d12ae4f340885" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="09725230ff929ab67bfb6e6fa392549d7d6e35368f14529ca9ec42b23368f73d" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="7660deecac7fec43984a8b5cdefd0c9f7c23dbbfd072ec3bd0fc608f7e5ac1f7" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="aee183af934eb2b0b4119e27926ec11808e8de93cf0c231c3fc15c91a9a6ad2c" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="5260567deb446ee73eafa95a541b29f73c0a005ca0a8f6cad109093b9385ec18" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="7cf3aba8288a5d8deb277513daebae587dc80ef8b6c4cd785d4dd1110cf1643b" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="d29bfb89c9343e6fa2f6bc526b7e78d04e00395a9bc37de9343a0aa5093c9f38" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="eb863bddef22414d8fe5b0024bfa10635338f7862a9c7acb71684f7104c3f995" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="3151cb25843a0f39dec8eda00bfc4f4bfd67007f96167aa6677e94ea8728f71d" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="64b405424359bd27085c8e011d8d4560b4b9807d6ea20e16e9b9ddda9085432f" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="5bb6e9f0f6596e7bf8ab23f53637a259a24eb4bdade5ed7d725f3146e4c070d3" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="f0f102e6aa161bf519c80b6fab679c71b2c6054f2e4499f26662e8ffde4cd313" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="3bca06854646938c61d511af41e5899f8d1984720557d2d998d66804d4d95d84" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="50f63271c8f64811b4687b655185540237e8e29e0123542111b772b1951cfd40" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="3cdf4bedaa9eea02addf7d7ad1c1b7f0cd21b9c27ab374c9c58f960964239e3c" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="1d852c37535380cd19fae39dea8f0f8ecb7ef915ab3b6ebf7b15bacfbb45ba23" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="480dd15ee9523157d1923915f29b60d01da543d970c9fd1b1901cca46f03566f" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="04525a8ca219c027fe5fd8e0f4e5a14e8f4fec00a56cc06db3ad0cdb4f1a4059" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="9e205465beb4ae5b303ca89147e46e2b399bbe3041e6e4fd8f9871a3397eae0e" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="c8d0baccfd50613d03b5d81d031b56318a5d88e6af1d96ca06f8aecc771407eb" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="6fa2fb7ac3861b04f66bf285b24aeed5e8093a20318821ab7cdef7c7ca8aba30" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="c479367c8505bfea1640f57aacab707204db6ce4e528f33c6912daae53a79fe2" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="6cfea5bcb10d52b000a8a455ceace83a5dcc246dceeef10078815c6d893297e8" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="edce360173822cf2e67dc06a20146a11526e74c6b2f30b155f31f1d79c4e1d9e" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="aae6d6159411a355a63d70f0a84368601db3ed20d908678ba45bc68814f70304" name="jss" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="4c8d7a1d2a1e5499b4788033d4d51fff307bf40ddfca6ea2550169a57b4a7ed9" name="jss-javadoc" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="a575d76a683669e64b5bf1b17a9fb2c6d6dc5cb4a3a43f6b33dbd0b655db9445" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="e4f2dfed4ed7809ce1d2fb90fa8e6d32749e3eebbf273ca50954eb76f545ec65" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="0d20c02dbedc5773421bb27cd9b88660f66f8f0d4b862e5937f16f6dd2519a8a" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="1b8b21a3bd1ad8dddcf75c69034be50c325189b1b2d77f217722796adf8a3a9a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="4870421a53644c391e13e52533757464c0155d877034fe8628285f9d864665ec" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="50bb977790f5b867009ea04e894347b032e01e85a2e979cd6fe89871dcfbc792" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="f47ff16e15e9d79996359bba831a56a6b6b576ec5622c952404497918f26e544" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="7b31d0152ad11d7df935a639011b61d7488a50bcd790358ca39332c6fc199644" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="b5034810f57f2154d334db0214dc9710663d1838e2daba0bac635d7dc9dcf1ff" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="08594865bd1694123e4bb9d715f835574254c7e8d9820677a37a3c650195c686" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="8bb9c90fe617be570ef9954e29a95b5e85535b5c82f9bd6f945ff45472abd5b0" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="da89e385b89c30afc79a93f09fbbe5d17882a210c345289f3769f6b6b314d1ac" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="febc0e6db253ce45a3a05cd29498f972f8e77ee81228e6e59f18e415b0435cdd" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="56ef042b187079c5381ec84fcc439ba2dc8b404657141128b629acc1ea0dac7b" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="56f52cbf26498dfa7ca66a6fc3abd9cba20fe469ab373183cf89eb30ffd2185c" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="b85bfe257464d37efcd18108b9fc94ec3fb8821b6d00ca388b561bc529c7e59e" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="293281676d31bacce91acde6543fcc120916839b0535a4626c61df22e405d455" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="d2547135ff7c810c6c5e2d9c8aaf58fe29fa490554bb20ed69a8917f56547e13" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="200101bebcac0b84b00bfe910c526deff86252b0c5206fc344f0a81d840cf6a5" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="87af6d74d4390b78e7a8ff3d4775b167a33c98b0dec79556b093fc84dc534a93" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="ce65419e53dc0662dba6886bc38e2b8926378c9e881a55430e0c6bf825cc8167" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="bf21e52b175409023cd9aaca780bd533ea754d9570626aad20513dad2460340f" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="b4bf2eb65b6a20d4a03f1e87a343ec66f6aaee2aae527f62d6790a4937cb25c2" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="30a4849b70621f42b365319f104e6a45f5e644e1cf2d4af4b3750aa992969b81" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="1605cda96b8e98f7caee873d468e0159d92971c5a1e628e832a0ae7a376b45fb" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="581e005ba13a323557cb962a7206211220ca9c2d0e82af27f15e4a7c12506f8c" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="590ea16b2c91a0f066a85f670a8d6efac377ff0a078e9b583204186ef74e5b21" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="df4f336524b35762408ed0f1f6c5a5860030130b0daf9ecfcdc11f9b677174c5" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="635ff8c770151da10a11e3d0e02f82c0b2cc0a4775193111937b51363132bcf7" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="6432d548e95751b7c2c8d8ad329432daa15bdcf5d5dc875f8a5677c08c04a3f7" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="29cdc49d6632dea8f595a10e23cfdf4d6b1531b4269ccf96e16b15c87d1821b2" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="effba32a2a5824bdb0b73b24ad9159fb0df128af206e220a2f8f67c8087c41c6" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="7ae722e1cf5b67f5e259a7e8a74b4c4332a5701402939cb1caccaa1e8762b2ed" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="8f75ef06c510c51631b8cadf4a50b0e3ac28c495262da3147c3670cf76fd21f9" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="98082e06f3c6d6b7138eb49a2b73e962b6b1ec16e54c83fee1e1aa3ee9ff1080" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="98d8aa51cafb73a938cb9b33eca0e9b11a545f46dfd4fb23e41a64e9557473c7" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="85c0be7db8953c3229fe8e27bc93d541777b7fd6b37bca5966c2d881a50d6ad4" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="8f0086d99912d13c068ba5d361cf90101acb86ab8b2b0a844f59fc33479a42b3" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="1ae9ecebeb0acaf239cc9c4ae7ae775db169898c82d63b51991d2370e5ae1052" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="b252a291ac28d3b3ea2085453dd2ac93ec63191fe8c389f272cb30b0e13da186" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="508895fc7ee7e8b2acb7ab0d681378c9650391968ad6b8460d8d7f5fca3ccc22" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="3507607d815261273a31aa2d1ca72cf71e46ae9637216eea2569ba453ea59b24" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="907dd499a602bc2d552840d2b09d618dfbcf44f83d7dbe619f115452b99f775c" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="61f4f22c75a282a94996ab8838bc36b47b73ba65ab4576e00d57c66b8dc0f049" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="f69b0b218f981482bf11eae650c1522601d986efac828a080eefb4736bfc4f39" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="38f1e1c6e1ba2b10d1cfd7abb9dc9c2e9e0aa97332c614f4467005e4b4599c7c" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="1d2bb982b928b7260002c0190ef6a272c1f1df635b4c710a69677e7fac0af8d8" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="17603ea414c5d31d7b9da226e54c000812a2404e105b2881309ccfcd067a306f" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="da02e24cfd0579b42e625229525b6bcdd0090e01d59bf6d0bcc2a6cb3e65faf6" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="82a55470aa7869cfd59c84062cb4903dfe54bcea3f7b272384040fd2e236b850" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="8b086416df05afd137233493cb22d50ccef0b776ff7f1d1e075d9850bd4c7f59" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="182fa94b9aceb26acfd92448da640bc9a427bdeb0ebf9de68a9ae24f6afa79b0" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="c9db89890e2d12e4b99cbc6d1ab8620138a2843b686578274f7cea18c407464e" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="ecb2fc1dd9d4ec7bef6d520b68bd981afe54e2a66d3c880aa1e3613893eb84e2" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="abc5e79dda176863df7cab6556882f1d9f27ff2fdfdbbda9ed4a3fa9b637693e" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="554017915349f6668235a8ca4c50826eea8f0fb52c6a6b15c71a2d48371f22bd" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="ea29e6eb2a4f5be3c3b15902271664dfc860981e3954c5c03b369e2bd52672c8" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="a347d958666601d21bd4df2284452e7d6a118015c40994d1344b57b5cf02c510" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="444513c3b69b4f11b350dfc0dc54828c293d6c65accd52e7b6b9ffb21dee0eb2" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="70f5d38aeb89ddb48f43f9e87ea03b221219087e43267dc5600d5d0845aed895" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="f4cdaa95ada86b7ae735d1484e6be6e5e199f710b3122b9e677cb2181b6f4d1b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="f3e550816dbafb124049f52605df8f15960f823c3e2c4a1001426efd0c0aad32" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="e7c70e4a41c1ed454ebc471d1f7128a1e3125da726de0d61cd06ec6a1786a5f6" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="dad242aabbd78994d2d1e31f9ed115909c2712c0fc2d5f0d3a475ff7fff771a2" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="a75a98259aa9c25325201565f428c71103003022c00f4ffe001324d8493d912c" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="f4b4e29c9b1ae97694d6e0bf87baca3eb370b5886868bd715c8e1c90c299dc00" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="9a1389bd96ef48dc324f3d04fee4756b71351d7319f3078ee865fecffa4b78bb" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="036a9947554dbdf1349a4e6fe08eba3027d073cbd6219a55f53dd348697e46c8" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="3bbc230143f63c3692f2dcfe68187bb5a888456ffd82684c4c366421dc8cca97" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="261451ff8a687ca14ebbb16976d5c279736d5d7a002efbf7f85424b739355a2c" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="0bd4997aeb2fcbf968f0592b8a435351b1c64770acbe17cd1b2d11c66d592659" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="04fea5f28ae168e290f508d6a36ff490ae9bfb45999fad1d0eabb9ca576cab85" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="47afe7e7be37e6b3cb7c0c9967ce7dbb82dabe78fd8bccde8bb41f2d78c074d9" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="e44eb2b945a339140f537705508e795748dc6f5bc32dcfc9fc4a6fa36845dc01" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="77e59c928f6d3c37d9b15c191fd2d2feddc9c430af1d076c9173b24121ecd30f" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="9b664c9c64fae1b362e76bccd403905c9cb926307ebabc2b6e1f06190445e59b" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="ab8b4cc83ee718ffd114f366325184d761c865d42ab2b44dbd47a62d2713b4da" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="a12808afbf86e8d98a0a84a33dc9aa2c326ee52eb486446011b706e4b007a48b" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="438a03e004d99a3811f8dee12f69b4f018a7480d664d5b52c6fc5c2740fcf956" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="695d379ad00c2c617f7153ac11278aedc950c254248baafbf2ba5732c97c2592" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="a7b1c0de3176a82aa394df1e2bb30470ba8be07df57e28cb4039dfedda07d811" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="8bace29b236386b438836d782a5c78980d926dcd0e519ed009c7aae63155e80e" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="f644994d2d23b341d7b09f9682bbd990399c9e4262f6ee47e5532a9684e5b2ff" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="a7c6c89a338e6c739ef95136baeb62556f672d8e5ce518c49288983bf609eecc" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="de80c65233dbb672c0030b7140c4343757b3b69b91905439c2ab653c56a0851d" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="0e62e8a1c5ab7fe236c74f16fd8341bae86bffb280d554dca5cb95ab201916cc" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="5067fca1805b421e6522332f908f5b42ab208d86969f97e9aa3067f04e32edc9" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="447a5713a6878c3caaf8e7f1c45e9691cb67c145933efd2db1b62c726a1a5aa3" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="af9dfebd6161ae222dd5f00a452af08e43dd398400a334eb8123a7b308a46e1e" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="8467d567b4175c1135f480625b392efd7e42df654ed007167a4376d34e5158cd" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="c42fbfa9610b3e81c925709e853a10dda9b2d786c1ce163a82a928ad1ee9b529" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="ce76a160a13477ac8ba2a0b9757f1cd54b9be0cf9cd9731c6bbfa7cdf754135f" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="1ddad087554dd9c45c37228d43a80be11cd6d563b0895a046420869ecb0fd485" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="c50007fc10c6a34210490d0375a971d87459bd3c7305f19181e7a39419ba03dd" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="9636e2b048c6fbd3b03a6c61870f7afb49efccd139641c9ba75bf604093ee85f" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="3194f820624cf4fe8807ea76eadd39dd32052b5f24582ae1c8eafb3f502a30b6" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="de335d189ba24fc081057d8abc4f3f0db62c94b05847c24b76af931b85c66bf6" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="736e7b501e69245a1f4b7f512a036d9a72e60508bb938aca21347594090a5c13" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="77b940bc7686c8fe182459673e7fe21bccc1a0c016a205fc68846df95dec4c35" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="ace0c8e10e296e92c2bea68f4f17d7f2565c7a8fcc6267aa21ee222dde7f17f2" name="kexec-tools" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="89d79e8b15bf96fbeb9ac239f41b4b9fcc929100bac5bfb2cc0a0de895b1b9ba" name="kexec-tools-anaconda-addon" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="bdf4a8aaa03da4a9852d42d05851b371f9145f5bf086b6d4a7033a454222ce91" name="kexec-tools-eppic" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="9ddbe6013ee09da926170e5742114592f9b8753825380c6b6e3fc69a9b03f0e0" name="kmod" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="57cd2cb4f6be72c2aaa7c2106939fd6dfd8a9440e410cac5cc7e0cfd6376f5aa" name="kmod" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="59d2fc82f21d2f433209f26e1fea23d6dfd502a7218ddaec4905efffa49549e7" name="kmod" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="22a911d321883c4deb74be3b252b84b02f7ada7f2e939ecb97403e655be5afb1" name="kmod" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="9e6b357a2a290a2ddb51d59ec555a3896ce855cd9437ac2f9e5d5774b0a6677a" name="kmod" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="fb2cad14fd0477e3c895f73d6e0e888056167e066e2e7055b79c8ca068bb2527" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="c8d639e5632e2f5cd4333b323f656182c3ea943bc66c259dc29e4c2f8177ae91" name="kmod-debuginfo" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="9bf2f3d4293dcf13984cfcc86e001c2b4189e81383965215622a1f551ae220da" name="kmod-devel" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="488b0ad8d70dd74c8c05eb6af079c59c67c52062289b0c566301ec2d43495469" name="kmod-devel" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="20f789a135c354b683fc05a974d7f5912155c53fc3d7065f553b333d29fdaebe" name="kmod-devel" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="c07e4f7f386938906e529eda68bd627421be8552b6c9338cefa31c54eed9a81e" name="kmod-devel" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="eb0b35ea8ba244fbbf44883ce541817b52a88b77fd2c5886c79fc3b3f530a8e6" name="kmod-devel" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="28312bb09e2aa4ccd37b38c19c2f711d9f1cdb6ce3b9795d14a723d91db8a062" name="kmod-libs" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="2f963171ebb9ff4e44c939a249c843af410671d996b9f05a38efd327dcb0c381" name="kmod-libs" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="4662529818c383b3e1ddf7f2ccd78850de1249904bbdfb80a6807cce393c20b1" name="kmod-libs" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="2fe51e237ce1d008e48b9eab80687f1e4d2cf4266bb7b21e0edf3fca76207f4d" name="kmod-libs" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="e9f2f1e1114a31081efa375094bff821a09ff76d7b54610cc6dd8df71e72858b" name="kmod-libs" arch="ppc64le">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="b6ff3f7afbd504f1489692acf1c66a5d64f41885d7a1e90ccfc58c160eb37df4" name="kpartx" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="4826f391b35168db5fa9a38cfd5f74bb4dfbc4a757c0cbda2df04f546c9f9130" name="kpatch" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="2.el7_4"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.8-1" date="1405425600">- update to kpatch 0.1.8</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.9-1" date="1406116800">- update to kpatch 0.1.9</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.10-1" date="1406808000">- update to kpatch 0.1.10</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-2" date="1410436800">- support modprobe format names (rhbz#1133045)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-3" date="1410868800">- support re-enabling forced modules (rhbz#1140268)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-4" date="1410868801">- fix dracut dependencies (rhbz#1170369)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
</package>
<package pkgid="82af869a6d3658b063489351067a793f41100eddd34eb2204a3f505846aab14e" name="ksh" arch="ppc64le">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="bab820cc5e547dca7dbb9efaf205e7d7b7344fbe973b53cc772d67cf7421745b" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="6b913d730f31b2ce0c8a72ab970d8762408f1f98b68ca120c70adf36e371b238" name="ksh-debuginfo" arch="ppc64le">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="58d1d81aafaa09e9a099ded7bf1baba7354e5012737cbda7e4126bb282a2b10e" name="libatomic" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="87476bf9f97f0d6f81d631e36cc58dcb2363699536475cd19950fe429ed33616" name="libatomic" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="ab317c1d6d564cb4407ba158aa75228ef3d4365a8b736b0c2e03d08b6de61418" name="libatomic-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3d0dd0a2f41139098ad81f2c8865375f2fb3ddb4eee1beafbc94ff8a2b6b45b0" name="libatomic-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="50160ab5f449ede5bc9a73f97fd6abbf009cb2fd8bfbb9de62793fbc18be1a9c" name="libblkid" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="506187304c458c6d7e2860a4b9e0498674a307983ce210b5504c3aeb53e2e356" name="libblkid-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="9916aa5560b82d31d620f9dbdaefad17adbb9d3978f63d38d6d7a7713d8201c4" name="libcurl" arch="ppc64le">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="33cf66ebb654068232f5b1af0bab51217dc2ee6b8e741e94b831cfb385a4c34f" name="libcurl-devel" arch="ppc64le">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="6bb1d75bf9bc85a139df7e862414785aded2f9c8db6f710c8c48a8722127b994" name="libdb" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="bf036210e3cd18666b92b09530fe8c9dc6a0a55648b8ab104c34e8538a324654" name="libdb" arch="src">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="7b1d66b1f9e904c2b80641ea16c310f336609a72a63c5f8e77210ad5ed4d7ef4" name="libdb-cxx" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="66b48a7b1755b5ec59441a9e052c6d6d9ca5f63044281bf423fe6814162c2dfe" name="libdb-cxx-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="0eaf2f622ba3a3df280c4b98be10877860188cd229a8a9891340b0f879b1a712" name="libdb-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="2124b7411e9b9dbd23c08d110e1f8bea5ced7b32fea257692f34dfa6fc5b64aa" name="libdb-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="1d3209721a320f81360bdabeb21ee485544ad76631a20ef6e2b11d72b1836171" name="libdb-devel-doc" arch="noarch">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="65a0b32e5a58f7700b170ce1fc1938a4b93894bd63a869ff4d3a4f7fc6230b23" name="libdb-devel-static" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="59c10cfc85a0074bc95329008aec2c0e57f20063ce6d1ad3c915f52425a08c62" name="libdb-java" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="9c4ca8e9c998fe629e4338acd4ac984ee21be3be4875789f0631e84cca9b3b66" name="libdb-java-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="c2a12c6f425721df7827c8bf5551db9d2421c622d3f63da0f204cbf3fbe7b1be" name="libdb-sql" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="0a6ad9af1349fb430eeb3b079e97e1172d3cde3906448b787ac152a1ba380d3d" name="libdb-sql-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="6ee2b7ffc835b40e4a01dc1c9b19f567efa6faac1de2c57e5d6611e317109e86" name="libdb-tcl" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="fd601d6bafa7c9a346c616c682d64c0b2b6d5a684e1e7a7a63b6171fe4ef0d7a" name="libdb-tcl-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="36ca84defdf7e8719302d65b401e7a78592e447c25e4061bba952ab507c4b1ee" name="libdb-utils" arch="ppc64le">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="31cc298762b701a1cfdd093f572028777cbd058b28c7c135cb39ccd421202653" name="libdmmp" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="ad58ddb2ba3f7475a5e5a2e8c176e42f56a38943625df45b25582b335815fc56" name="libdmmp-devel" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="2321d188026f6f3b4d4f26dda326cbf5b4aa04e9b35456953344d18da2b5d97c" name="libgcab1" arch="ppc64le">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="95143f63ac0950e1f7c79bf22d53fab43fd0df6954ed1b77e135eab8da74fefe" name="libgcab1-devel" arch="ppc64le">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="4c297ef14f7d992db4cee6806070f247796a1472721e31ea1c67107e585ef41d" name="libgcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ec8d68a66d48331fde96e0806ad8e4a71ad86812d3e47469a2b300b133cb2a11" name="libgcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="e66b76a91ba22d63d0922583e290419ab432a190f5a2056fb8da04ba072ec416" name="libgfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f7a55aac68f698d3885f670937cd53effcd43bf28bb0a634394bfd46ffab55ac" name="libgfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="616b3e01b6cc64481be12f0adb8280583b93dbb649d9f61ab0e0cd9e151ef373" name="libgfortran-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="fd6d5e3530646d555ecb9c8d20928b25c7cc26d591c3eb958c37d7830ae2be5d" name="libgfortran-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="0c54b5e6299ef857741ba35611ebf512688e3e7f97e7401a32191ab1928d4770" name="libgo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="b8f0db72989b3c333079fc01ef6284980cb12e26ca92dcb9199f708945427986" name="libgo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="9c668cf48c32faf4ca55f7fc0119edd0fef64c357f67865ee706e2c1056a1c99" name="libgo-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="aeea3ab8d4f61442ab80487cffacb6e53f0c845cceeecd1a0d6c239848efc4a3" name="libgo-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="a4ff31d284ce9db9ff676fcf1e1286ecf687e2fe658c85eedd8492f8d3248097" name="libgo-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="12cc0a027319de2ec228e741be68f27a468580a122b043920e54711f05ae699a" name="libgo-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="fb8b34d0b781a53e09c37b031e0c0af75e69d96575df290da21ba20658e5475c" name="libgomp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f4a3f724ebdda724e476549e2108b4bd7f20b883a44bde115f8b081240220610" name="libgomp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="480d5fbbd3329f39e3042fd857996f36a1330b25cbc7ce9f06d1ca68e5e7991e" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="0b847aface7f1c80813bea9ba3b0a9b80c41fbe7a83e70aa7e0cb7aeb45bae6e" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="770a2ad97dc519e2685d3291aa4faa9b6caf1451b601b1d259192bd78647eacd" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="990817f7241ee1df7c6a2acf3e13e008d746fbb7f8525d6c9fbf9abcf59cf550" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="0ffb07be74a53b154ecbafd7c5cbb3444883e9a413223f340898c4c5ce71f5a9" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="289ef5d70db6bdda8f95e810eb83b46c4a0606d089fdc559eff507b5b04ff75f" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="5dad00aef3122f7ad5f78bcbf35261f8ba9a88b0067f9c8a7ebda483f9218127" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="6241ab117ba8839cf8251603892e0093b922dc72e8ed77a9897f4b8bdc0a239f" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="955a124906d4c670faca47eb9b1db0cd59bfc12ef2d420c4c17986e4e1673165" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="1e89cee0b564bc8fa9a207a5727a8124965cceb5c8bf8f5c2b8b4deecebceb09" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="b5f203904cd1f0f8fc032abf937ce9650266575977aeaa8a8bb82d4dfde4eb69" name="libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="29659bf5b995d8cc2a011234b6114c489f9d0de35ea97c7eac0af4ec71fa80ae" name="libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="2714078fec43eb657c54682d9c62d65b9c6070a2dde5f9c8e392c26bd019ea19" name="libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="967956a87f7b311dd9a860520319a77e9d3506ed759065d2e933b85a08da7862" name="libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="376736f492e5a047f480cbd5d10b33d830b2ec22ddabc53d574a6db911c8717d" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="e504f04fa00c09b92ff288aa9190fb01d49720c0c7436d16bd049b8395b28034" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="ee1d2c70a9677ddaff6874268e70bddb1a03d1589b29b2d22b0e7dfb1123f475" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="11d43ad064efe239454d5da53314ea11326592cffb91481461bf77264367cd20" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="d4f793bf8eca20c25ebcd05eb756c3c8f91c2352fc1ddacd111fbe0e8fb4f4e0" name="libitm" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5906235adb234c5875f84662678cdf1de22e9deafe6cf26921e7f5f70fe44c9a" name="libitm" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="4db14da1c6a73cd81ade28a0ff75017134d2f15e589ca2b32c02fdd856b2988e" name="libitm-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="74e530bd5bdadee7837077dd46cf7c2215219f1f120725c5f330eea855f1bcce" name="libitm-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="9f611434cdafc44c032878ad1e48502e9001dda1b73fa66272807b90fd3fedd4" name="libitm-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="33fae5fa4f5b76f0254c78ac244e2ff0dc702f956c54006b14fd9002a5a62fc1" name="libitm-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="ba55d3025b6814ce22e9257c83496bb6537712cb931f3e2cc32c3a8116bf5ab2" name="liblouis" arch="ppc64le">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="a376da4ad55e4fe67eaa42f1967291c0eeabd0e61d39be4fccbf0b5a08c16198" name="liblouis" arch="ppc64le">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="9f1ca17275ab703c8b76e77cca96770d3274ae802ebc4d4fd7fbcaac85cae659" name="liblouis-devel" arch="ppc64le">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="55e54191a768caea4dc57997e3ccc69022be2d1a8ccafd715b1e06063f1cd079" name="liblouis-devel" arch="ppc64le">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="24430cd6d2e43d3928dc1dc6e42071d1b87e9d6f54d57823f652e0bf1f37106a" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="a38f6b1faa8400178a0cb738da189f0319a46e289ef8342b8ec3d5bb67e0fad2" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="427517b58ef1e5fc4847d61de4f3c89ca08e11c21ea5ceea0ed3f827196cb280" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="6c7c7ade01c0e08c6949e676755f5945b9de96cc274fe835946271529228fa7b" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="6b57ed4bd3e94b71c13ccef3767fd5e1c819e84d0699ea6371b6cf1a046e291f" name="liblouis-utils" arch="ppc64le">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="40c0348820c2c70bddac6319939c153fe028fb18c3befb698282eb7d546aef9a" name="liblouis-utils" arch="ppc64le">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="e97854244fe77ef61a6fa134313fdc1b56853515ffd8f1146de818e4fc8a81df" name="libmount" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="171df0e525ca8e60a5201a83b8ec520977f7ca0db49ca04029817c80cfa66942" name="libmount-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="74d9616184dd151d4a779f4f7b09abe3a38363ece20535bf231a3f52d0e792ea" name="libmudflap" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="11fbe455f11478cbc1a0d49d0aa453e1851e650154c99fa5beb51262ceaf8cea" name="libmudflap" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="cdc1e12eb32b55fbfaa1d05778457dbc416308476c9d4de19a98a6a228b64f87" name="libmudflap-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="1c50f1dc9cf88368229fbd0d611c0c303751eb169c9c4f9e6d0f3327364fbb6e" name="libmudflap-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="b700c019d5ed5a343d26a35cadd08d5588542056d5b50615d810fe1c6576a88b" name="libmudflap-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5ee6dd88149a298e83ffe55bc501bd9841f0dd2e792490d8c7c355cdb9c3181a" name="libmudflap-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="b8182995ecea0c702d1e200a2ebe295ac56758cccc1ae34dc5ce26861e12b59b" name="libobjc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8c2d81eee1af07054f91740a3ff6e19efeca7ad4ecb5f48b3947da8dc6e8e3d4" name="libobjc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="0166535b5161ec5f570976adaa849716c66b411d2ce53426545ac020754905d2" name="libpciaccess" arch="ppc64le">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="8ea9824ab0b280b8cb5da17c707690b2bbad997a8d224a31b8cd9b104f405156" name="libpciaccess-devel" arch="ppc64le">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="1783700ef7ade8f19997ae8ec8c0e169e63f7866d1e462acfddad5a94b068cf9" name="libreoffice" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e96d43b8083e59f0a790a5fc8beccca69bf30ac87c81b2a0fc942e02d1c1cc66" name="libreoffice" arch="src">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b6124010ec7b050c276b59126b1bacec0ad39b938e356a6728f95de2915376f0" name="libreoffice-base" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="297f7d861b09080edafdfeb667daa1eea578d8a660d1be7faf16287180918250" name="libreoffice-bsh" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f12e7eb4adb17a473a5a88ac0ccd1a8d4fd2a71b47db0f7ff168e7b264fb88b0" name="libreoffice-calc" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="eeb6b0799e949281c3a92ac745c06ec839601bf0e6e9d2e494fc1fa16c455428" name="libreoffice-core" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="faa7a087a72607841fe58bad973156165d8e41cfeaef69257d5a05a435a40f96" name="libreoffice-debuginfo" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="45267843e7bfc97e03e00f9300191b42495e93886d3394d3422e9628ea6b7307" name="libreoffice-draw" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ec9be923d1c3d03e4bca8ab808f7f6594a00f29a2ce471ab8512feb645b9f5f2" name="libreoffice-emailmerge" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9315037f5e954489f127ba7a84281608c610d4be3f40cb3db0e981d27f9c86c9" name="libreoffice-filters" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="88b657cb77b86a5c455bca900565c3eedb81966b53e32265e5e8d95990c2209f" name="libreoffice-gdb-debug-support" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b21b5f7420def6b81837ae67b6ecc4ece7b4cdd8a753cacea6bd15f7d91a83f6" name="libreoffice-glade" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ce3e33d74d38f8814f5f10e35832d38703b5f78dd64c2b1f3b6fb102408a1226" name="libreoffice-graphicfilter" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c91f0976c5f0311a5d39d830093dce7a1b006876f754d139870b99b4c272fd4b" name="libreoffice-impress" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fbae0812b3cc82e5c6b8fa46eb05c67ec39c8de102370f993ade2527fafdf2f6" name="libreoffice-langpack-af" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2952b433dd91404ce4d21a55cf013c9bee9fda598bd6d109abbfa54de845af1b" name="libreoffice-langpack-ar" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cf5b72712bab06af32a3ef663a324010c057716f2482b941519ea86847ce21e8" name="libreoffice-langpack-as" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="67f021ab31700b2187999b346575b487b02b09d235affc12ecb7d56e533b89e5" name="libreoffice-langpack-bg" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="53abf15782294c8754d95d72eebb71a32c06ccdfa4ef57991357b7e3fd241150" name="libreoffice-langpack-bn" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b8b3337ae9582d03aef7a7d17ca585b070e8aff6f199de12f0e1ba346babd8cf" name="libreoffice-langpack-br" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bd5fecc5d192b2b8278315a8858412d59bf5281b0d644230a3885e64bd7511ca" name="libreoffice-langpack-ca" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cd217fd061e98ac4d470da7c451e7f0fc1257adc922a4844c45973e6063ad327" name="libreoffice-langpack-cs" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="35f36975956744a9389bd4bdcbe3d37f7e722c018ec0127e2e83993619f60262" name="libreoffice-langpack-cy" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f910bd4f01a21b7fe8b22d073dafec32d31a8e343c9a8931bd82a74cd569e38f" name="libreoffice-langpack-da" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="32016536ddd270437331899a88cf6937ed56c56795f579b33bc026144a8826a7" name="libreoffice-langpack-de" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2f758abb78c3ccfff6b7be0e5d202bdeb12beb4096543979c6dc0d539195c31a" name="libreoffice-langpack-dz" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2f218dcddaca8854c786abf74b53405096529eb1d0528bf7af61a6b7c4299f2c" name="libreoffice-langpack-el" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0d950f7a601647538a3ec6360216ee4027672f21fd729d0b431126ffb10a7f4e" name="libreoffice-langpack-en" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dfc559dd0c719dd01d8996fac44bcde71ba93f9312fb8134598197253de4956b" name="libreoffice-langpack-es" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="07f6764733aedf0d1f6073ace1a505ea758abe6cb0bd75e2a44e325cf7c5564b" name="libreoffice-langpack-et" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="eb13fda2cb376a70c254f798821ab918b15e49b9f834713e3c7fd2819f6df6f0" name="libreoffice-langpack-eu" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2a2a3624a5353a2927172dc50042d50689cbb085dbd3eb5d52d1899577e6cf22" name="libreoffice-langpack-fa" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="87ab5f69698df51048c9a4edc27adbb25eb9dd70f0777f1d4ef3cf32642ff4d6" name="libreoffice-langpack-fi" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8b7e4008b18d9811d190a5bbbc910be4f00ced98e5a7df71a111faf1e03f7366" name="libreoffice-langpack-fr" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b9078d77b3a4c2472205b2e283030263d7a1c5b6c1cd848f35b4ee48c95e2065" name="libreoffice-langpack-ga" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="025f9612a99a14d7b69fedeb3309460b23287a31a33984826ba42daf0f6bb357" name="libreoffice-langpack-gl" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="55209ba094f36a9b95ff93c224ab7502c4d18c6b36fa7de5b8daea8da39ab0b5" name="libreoffice-langpack-gu" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7d9867d8448a9644037fb3306a8f54783e949a063e7da78b512ccf480e7c514e" name="libreoffice-langpack-he" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="156a5af60b9b801da014b1c4b04310fcf37b9a107ba9784486a6fac9fac178c2" name="libreoffice-langpack-hi" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f4b2104b78e41148406a8e39136b14190a097b871b498801579e8a7788ba4db9" name="libreoffice-langpack-hr" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8f1a843f12baf3761eafa6a363e40e4bfb40a60ca44b3b2a03686f266e58a774" name="libreoffice-langpack-hu" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6f591b37328ee48a833bf5517788f53126fa9848dcb9d21f7cfc16df1f292277" name="libreoffice-langpack-it" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2351f31a23c3374111960086f6efc1c31135c57701a5c6b1666ba8d6060ace82" name="libreoffice-langpack-ja" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bcff3462c8aa67340ffe38ba6fad6835cb088ff1549fd9a9f3ab88ecd857f972" name="libreoffice-langpack-kk" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d52b0580d2d528777060d0a7e40b7fc78dee0875545c7837419b1a169a8b64da" name="libreoffice-langpack-kn" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6b3b5af463b173138196f745915f914a8878afc03110b32bd4cf1af5d67a0463" name="libreoffice-langpack-ko" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5c977d5e2b998e6bf1862a898388cc260e1f6f1b3984f538f71c7dde82b3db20" name="libreoffice-langpack-lt" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0cf3bf5cc9847e5eb21cb50d0800127bb053d0422c8eb8629477f0b112bdde33" name="libreoffice-langpack-lv" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c23c8498049371e1ade7149b30e7adb0529b9e1814bc308ca3fd17aeceeac2a0" name="libreoffice-langpack-mai" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d55f3d9a63381ded590020dff756cd5beffcd999235ce20ef4b96ff22ce5db40" name="libreoffice-langpack-ml" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b6e8c8f944d44bbda8af896aff08b958124ddab85ac9710f1e288325be681067" name="libreoffice-langpack-mr" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="34546cc4e5046b953c9be0a6f612230d14ea39bdd0cc747a6dbff1cc2300e914" name="libreoffice-langpack-nb" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3a270c82b8a6e63c000bc76e11383717965cc0f4c573c6492ab80531e0828b4d" name="libreoffice-langpack-nl" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="373bc0b819d8e5922cbc523872c0c068caa6feb7b13010896043e5dbe282ee6e" name="libreoffice-langpack-nn" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5c5f097e093ef4274c165a707d53c1733971219cc6a4fa01bc03f6bea5a54c9c" name="libreoffice-langpack-nr" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="55c48693663a97a465b5395aaa47b6ffa07cf7d863302da1ca0fad4af4bb1978" name="libreoffice-langpack-nso" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="22676dd4541cde7aed4fad2397dcc20275dbbea40f45c460f0d9162f63f50b32" name="libreoffice-langpack-or" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="81bfbb4d2857bfaf7be6afbdb1b6becf4b648854ef226ccc1c70ce6a42ff0516" name="libreoffice-langpack-pa" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f7a8d8702b9282f61d809e45e44cbd43cc12b17713bb1cedc2612393fdbf2411" name="libreoffice-langpack-pl" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1a2389059eb4052f3fbae34d37ba3a8f38dabf3982914732909ef8dbf184357b" name="libreoffice-langpack-pt-BR" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="71d5b19419f6ae99b40a7f6e5c174e3dc7f1768366c1d183907f62724c84025e" name="libreoffice-langpack-pt-PT" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ce5a683ad8b94c09aa23c47a3b24562622ce363a8f93dd3cf1210dfc5e218dae" name="libreoffice-langpack-ro" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d7cd56da2e4c5817d7905231ee36c3561cc9716306b99c90b96f66335c51c132" name="libreoffice-langpack-ru" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c7d8a5333ac910a91e02a1e5395af0a9a413b94752329218254f7ba844c9ed65" name="libreoffice-langpack-si" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c32fa33ba0f977c2f4c5da9650aea4197166ab65e1050f1f758c635f4b19b1e3" name="libreoffice-langpack-sk" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="43b094762e99de35fd4a36d2ee22aa665e55dcb9397365e20d792a8f5187a99e" name="libreoffice-langpack-sl" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="19f87a1be99db67aa874f153368ed10cf77af4ebdbc284175462b7ff47c358fa" name="libreoffice-langpack-sr" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1bba2023ad4b23284c229baeb36838d35bf7df82fcdaddb5cd79b5166566acec" name="libreoffice-langpack-ss" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3ecea08175973ce7db01dfb1ef628f9a187a60eebed3846e9d1dc9a12264b0fe" name="libreoffice-langpack-st" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6f8672d2dcad16b25e1be5b87ab94f107fa33ac965dc63f0daa10d4f1d8d8836" name="libreoffice-langpack-sv" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ec76606c3fdfd1d40cb50328c3ca4c89c8b817253e9d29c7e4a0878a10abd891" name="libreoffice-langpack-ta" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="481dd44781954e588584b713ca3c5bf686a80b4d24b2c32e51fc6aa4bbb37779" name="libreoffice-langpack-te" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1682ae2bd94b20bbb1a8fc53bf7ccb0d58138c5777fa285a3b66f1ed597bb73c" name="libreoffice-langpack-th" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fd0e3ff95a1f7d76d1831bb4dabbe1afb2c3841c423b0cbca4e9daf8d7548148" name="libreoffice-langpack-tn" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6dd0181a9472d105d2817aa1c97fc316c1f2c9c3016ab224225182814eb0de71" name="libreoffice-langpack-tr" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1c081aa0f9cf9dc71ca5e8affd5333501168cf075fb174b20305cc4278cde424" name="libreoffice-langpack-ts" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="078db76d34dfc08707c508195f823d5d9969b176cd7bcefd7200375fa5c56b11" name="libreoffice-langpack-uk" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5008864bda8a464e9a78f982b9c3237de020abde1f32a9df40db34899f868115" name="libreoffice-langpack-ve" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="32f7a1da72bbfd9a9422a5e5af167d1ba80fdad686403757768493cc2646b0b9" name="libreoffice-langpack-xh" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e9d26dabff9064710ca7120bb8909d71e06225bbab4e7055956fffd67e689f19" name="libreoffice-langpack-zh-Hans" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2732220f85bd44d01a5360352c98dbbbe95ea5568df01b371f2fe67f98a2a6ea" name="libreoffice-langpack-zh-Hant" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5443ff4d3c8c85be9d3f8ea0f94bb8d51104b3428dde8e99ce04d5c606746d02" name="libreoffice-langpack-zu" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="280edc7b0c6cfbb1dfb23e18306903a829c9afaeb2ef70f036d4a5809780982a" name="libreoffice-librelogo" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="95ae02745f11d93ada4f0bf27e6ea0b32cf73e6ee3d2d2c5b1e38d5e4875fbea" name="libreoffice-math" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7b13ad1959073dcfc61cd2868cc889e1cee41ec38a2275bf40c8326566d18dac" name="libreoffice-nlpsolver" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6a8862f810e4a82ca037fc0d078cc3c2c3343fb334868f7da7491cdfe5334778" name="libreoffice-officebean" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9f94d32588e4d81d1bb2cc10af58818a56737934a2bb0a7f31fa1191a0d4f705" name="libreoffice-ogltrans" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="027c0e123357092bd4903975090b64f57fc6efa10dfdd3ce205ea3d2e874f23e" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1198879925750a1431e2f646aa44d173838397251ad71a668a4cec40882e90a2" name="libreoffice-pdfimport" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6dcbe1b996e84212ae5c965e3d012e5a50500734b34173c7619dd7fee867efd5" name="libreoffice-postgresql" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3beaab0b2d22569f1ab96c01b1a67ab476745f1e842b21a914b2ed60a5875037" name="libreoffice-pyuno" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="37d36af24e40ca582f3e2db4aff1b153fbd327478aef0015610721f58df122ae" name="libreoffice-rhino" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="56c2d04c486834d72e6058d65644a2fa977337d410b00edec4897cbe571df375" name="libreoffice-sdk" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a19ddef6bc6911761f323074166fee5c1c9bc6424136ba31faed9c0d7b5fbb14" name="libreoffice-sdk-doc" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cc6811952f1fc418f9d927602f0c9de9cb7507c0dc94819f3be5daa60b6bb1fa" name="libreoffice-ure" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="473f8d517a6d43010fc459ab4952c4d5e949620c76e14544b30942479da8dccc" name="libreoffice-wiki-publisher" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="25e6e011242fb87a4c03088fee593e145c0e60d8f8a949845ca904f2b4f56653" name="libreoffice-writer" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="761cec687bc3ddc503ebf1c1502666395c1c119fdb17b9e0e35532f8a898e437" name="libreoffice-xsltfilter" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="07b9d37f49a1f00b7765cc85401ee6ebd65a1ee0ba47980e8100265f8f0988c7" name="libreofficekit" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3b10382cce6e6b6bb7afce3b0532d6dace2ae421a40e360e08d15567f09f3702" name="libreofficekit-devel" arch="ppc64le">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a6a4e12ef4e6c85a1b1883bafceaacbf4cbde7d12777085c704cad4da9ce074a" name="libreswan" arch="ppc64le">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="815d76a9f3f2da66bb871e511c2c173650d68082b251a38d14d861e28fb40dc5" name="libsmbclient" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="7478302416f4caf6bb05cbe95c425114436bd14a8a743d043706fb8a578c6275" name="libsmbclient" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="12df84a1689e4841edb7041edb60ebe31fdd7e74b65a1ce95ddef58b386ef20b" name="libsmbclient" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d5ab9a27b3d625ac4607acc7d8a8c4c5813192d265353da5eb399f915cb238c8" name="libsmbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="dce3f19d9bb08ab837789038f448eb3d7e155b6c23d43410186f99ee5d493e9f" name="libsmbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="4e09d8fe771f14e603c2af01b0ea151b33d1e777a7ae34a5fa9c822c78269b36" name="libsmbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="b5cabb5b23cf6ba752ae965e1fe15969b5c9ee3c70ab04314efa3522dd6d985b" name="libsoup" arch="ppc64le">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="b04c2019029207f8d70d5b3a22d7077e1511740556d3f57e6adfafafafa5ea48" name="libsoup-devel" arch="ppc64le">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="e24831fcf37c589add1576c19e733b05fb8e6db233e92f96b55ef45f5f48bcfb" name="libsss_autofs" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b3bbf141cb0021d4dd85de23f25d793ded6c7715a10af55b3fea4dd817135f34" name="libsss_autofs" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="e142c5530d21b71ce4c4ddcf6da277d229fca1fd55cc801ffe75b2a376fc17c9" name="libsss_autofs" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="ce307282a274ae3e9e181191a9ec7f82e70afad6c9defb8959fb6285add890f5" name="libsss_autofs" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="743479b87877c6a12fbbacc2d9a3abd97844ad69c36941dfcda152d9a31b6cb1" name="libsss_certmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="7f51f6cf606cf38bd250f3b6c8e08da9040c9300f293c2b61df4b6bc99ad7c4f" name="libsss_certmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="8389bf5e04f7ee36ba240c8a72c5ecf7c827c7d0d99c6dd3e05fbe9c50595020" name="libsss_certmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="1ee7552d45ee166fff9575cc331cdab3667c5792b780b7d3db7780e910cf54df" name="libsss_certmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="5b743922f638d7df0866cd16ce184b43ae6a43877f5e8766c4424791cc71c295" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="19ae0479f6ba79168730e0aa6fcf8f49328229774f5e0de13960a2fc528680d1" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9121ac0b741eed2315eaa825d7f1c08b40122f45a810ecd725970b750c4ff874" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="0f721b51e7e3551033e7fafbc21380108570a27f7996deef7c366dcd8f6a8305" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="823f99742fbc6f8fab94c9c30732afbcc9d2d7e8b782bad1a730eb7ff522bd36" name="libsss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="78eeedfb858a3b8eab6a59b7089bed7bdffba7c6b6548a555763ea467d11a476" name="libsss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0ea3e2e2febacd9d5f5a2677129034272d6a7adb6adbe8e687ce1fff2c2e23d7" name="libsss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="16203fb46dfbd61b4f806f711f42f320567e5506487f0d006f746d2712f6bf7f" name="libsss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="8efd1a86b50de1bfc35f7a6a56b4f22f01284a9668ea7fe00143690ab9a74009" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="c5734ecd131ea8e95b3df6711393990cd6018eff1291b68584e3c947d7580695" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d9007df113329bb3973ac356a89fbf99cd755e7c13cc01eade4f2ec96a7956ba" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="4b33156219c490038c0a16eaf08c1c62d4d2233d54b659f3eca7a1eca93a375c" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="7c8e6dc337c270a2cacfc1e3c22c67caf691bcb229c29a20eede1d7c8962b025" name="libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b275d38182708d921847c5b4f357c86d0a255810a788f16b255afdb1fae45951" name="libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="15558397a2ba636d343bb36cd44c5a2a89e8148f10b73e470f3aebc38490d1a4" name="libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="4bef2e907a6a41d49007ca03497b24b0c8dea553592c919eb69e67fac47278e6" name="libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="76eb5f1215637fc0b21208f670eea55502ad3152724930c6095685c666ce5b73" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="218a6540f4d3d40d7bc6daf9b7364a0a2e5c76f2262c2f07358c70f66203de5e" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0ed99a9ebbaea5aaaa1cfe7794ff10816909d35a94745097a22824354c32af0f" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="2e5df73e591104808dea211634e36fb8aa53922c89dff96a14bfb037667d3754" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="f15b2c6e594fb1408ed28bbf3d933b5601c790870cbabf20e942a07210880a9b" name="libsss_simpleifp" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a3399bb872f33e6d2db056702f3bb2743f7091ebe3b604be5fd6a4226ee912b1" name="libsss_simpleifp" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="fec983b323b9d67e349ee119a5dfaeb2df76709f083957d0acea6d75cddfde20" name="libsss_simpleifp" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="50fd8efa66c5e25081867c485c5b8b4e1dd8ac141d051d2be124d01a1b3d881e" name="libsss_simpleifp" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="fbfb8d88c3b955c71baf7df149a38c430b5bca0eecbcf8545708c8db7d518fdd" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="02e5f6bcb1211693dee56b3aab6b9fd4e732daf1d4815b9999797454fad9f996" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="aab481978b5257f1930860b582bbb30d2802200c6e9ad6b7e4c3def1d27c9d3a" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="8bb76bdc29c26204cf03b28222b3967ce032f0c2527076744438838d74c8ef17" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="daef6ecf023953bcc4177252ff21640969060493c7e77361ac025007b0eda2b2" name="libsss_sudo" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="ad82bc86dd01cee20847b064da90acf4c8dfd4ffe08415132a5004e195a808a7" name="libsss_sudo" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d41cbfa49b93ad21826301a13832e9efe1154615e7f6eaa8be38995ebdb628d3" name="libsss_sudo" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="1ccea08661cd10b3a273a8b0a6c9e484552b094848ea433c8d7eee34a2f32b50" name="libsss_sudo" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="5e853f8c0a363e1317d2410b92958b1611f131bc3808c763a0b41858be8d8b81" name="libstdc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8c0d71a59c7224793c0a3eb117e5629ebb332c0eae049f831a72df365bd3db60" name="libstdc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="8d3f2f4f40d3f7714d8e305366ecce1a546b787099d3f4f2ceeada2b7dc4bed7" name="libstdc++-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ec74277d14edc9e27555f19541fc8f265d0374351970c2e2627e2bbe32b6b525" name="libstdc++-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="a43102db55cfb1e84d920065d692dd26e1ed07c845e59bdbdde86a29d4e82dd6" name="libstdc++-docs" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="4d45aaf27100597909e402fcf9f8bb3a8ae086cf16e12769efff79fcaf60e45f" name="libstdc++-docs" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="4ae984b83484283388a80ebc37c1e1573de4d21fc34e8bd8caf14c5c2b2c7fd8" name="libstdc++-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d3a30eca7ec17e75309a5285721cdb71ef9e5c3fde02169195abe9a71c38c35d" name="libstdc++-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 4.8.5-16.2" date="1520424000">- turn off ada for ppc64le</changelog>
</package>
<package pkgid="68afd3aa185d1d44b2b75b79d2f2dbbc8bac55816f527bfaa9009d562ba5f3e6" name="libstoragemgmt" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="57b1f8821c7f01928dc0e3abf7720fca03fa7c036da18bb8432a73fb73b2d875" name="libstoragemgmt-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="cd5017a49fbb10259a26bc331098c04f3c630e75f9e76f97673311bb078b3ea4" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="f2e1eb284d3111247ea45a204e3d79f31e72e4d6ea3e985c69ae03c2cf384be0" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="356bac7fc2ed58a38889c55e34e1e868c8da0ba3a85ff26440b8306f7a758fc4" name="libstoragemgmt-netapp-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="6b194fb2cea2bb18901d6a3707963878618bd26503330864e3da75dc366f426d" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="942401cc048cdf48c2794d6791b176779e590a75e692178475a433c068a7a8d9" name="libstoragemgmt-python" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="cd31163acab3123ab151b91aca165f68fb01e9f6ec2a77c10593dcf9f30cfb32" name="libstoragemgmt-python-clibs" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="b9c29588dbf204a8d8db10bb9d59ebc703f11c119a37957a1319eb44f78b8855" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="5a7a4d8c23e1bba7500a3620499317b55a8ff197064b4219d9ac0a969b2580d6" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="01d9f1a577c0d78795aab7a2c257a811869f8f888dc36c6e4869cbfd1c3d8b0f" name="libstoragemgmt-udev" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="c2c44b37eae49c6a80173cb34df8404ce831e740ffbec77ca1502a44ee4aebfb" name="libteam" arch="ppc64le">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="4db9d209703e60b544c19cd2eb391792862fba7796cdfbeecb3c146b1341f8b0" name="libteam" arch="src">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="150251e61f194241d834e35d0d9b979e619f346d61defad63064a439b52011ed" name="libteam-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="bb9d3f48dd3f0d93fd5a7bbea152632de63373fee88b1f2d75d2b8fae4a8a4d4" name="libteam-devel" arch="ppc64le">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="0d4200cd6361cf047a70ab6c5964098cb6046ad69caaf3f6a55fb1a7e79621e2" name="libteam-doc" arch="ppc64le">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="80767cba6e1e9bdb0b3651b8ed5f0a6581b0887b8d8cf8563c8feb7b2d641212" name="libtevent" arch="ppc64le">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="d77757790c79cca38a7c3aa4c26e1f8a24781d9df0b3fc097594966cd5e4ee63" name="libtevent" arch="src">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="595c5ce03ec8eada5e6e5335719ded356263d07b578af415f9485273321cd0f8" name="libtevent-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="861b068a2552ed4a765e56aabb0699424b3344ac266c2dc60856adeaaf7b1c3b" name="libtevent-devel" arch="ppc64le">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="acd47e200c1e55bcac056121360383e345b09efbc10d7cf258be203586b93247" name="libuuid" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="32077757555e1a63714fda53d6575f304c584c8884707ed2a32121c1242ea29f" name="libuuid-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="26e0ca000e92f087e4a27dd000428dadd96fc2ba0c618099654c184ba0aa9e48" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="a90735adabd405dfa889d1017848514098a012f628fdc370f1cb994700561c67" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="69dc3deffb2256a0014e1856b222ab8f99a5337ace012cd923a46b738fb91b78" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="fbfdf88e18eaed839932e58833e71c307df2b4edeee856566ff70074f7c26e73" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="c9ca2b677995f701a3a75387f1d2dd3b81d78e7baec6082a6a9c85a84e6315dc" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="5e4bf0b3d1dcc62e4b42762f3bfe77dfb6d23e4849bb3e7cf70e4dcc646822d0" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="4b410f5a86bd16178245aa1052e79fc7577231ba4cb1253c82ae93e6b03cd29f" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="8c5842094823e5e4b10964e2108bc3e195f828da450f1334f8df9b2770b382ce" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="eaf4468805c9dcd4eefcc820e0735628c1cbd1647553d7bb3aff5c0006d96ea1" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="6972fb9859913a38188496434902e899f0d023572569bf93da68947a5fa12d56" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="acd6d1b79f6abf169e9f472bed0f0e139c9786dd3b7537551017cbcb99076fde" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="3e1ce6363de0faecc0cc1e242160a42c3a9bb26194d29abb94eba26f40cd9f76" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="efe5022c8d7c90b8803fc7163a5969241523f59b0181c81e3f5f84057bda7d2b" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="57c52fd321de406c9a082325b88614a639f1d2d9d6d535daa21fe606fce75e97" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="70fb66c7aa70e723d06964bbe1c7d3609087b694e3c209cb69a93deefa709592" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="6d274c8a58e8584bbb8ec42a79142f3a94dc837de61200f00283c36210f175f3" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="91e868c6919964c1f603bd07d0f5a0c01d2b69c309989f19069979ddd544c376" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="a167d0098cce6e39b0f2dfee77bcd62b732132d18f70d016131835e34106a419" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="98e98919ed1a513a4dac7d2ea5fb541693703713e41cb22c039df152d8a45e9d" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c35977cea188bcb8bcc670b7a2b919f48abc93f1a0199ff0ed0a71e8656e46fa" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="f6aca423949c98bdd4cc42e65d1a7fc719f99bd94bd48d6246f9b09f9924039e" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="c9023f358fd7d3a67c21a5bb543339acbffd223fb79339e4ed145eb242509bd4" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="10064b7fcf4526b9b702bf699598803f6a5f98c664d180da24dbd4759be4f15a" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="532e75cd28b185c7f27960ba6a650dcc9abb19102faa224d45bdb202a2f2b39e" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="ec8cd7120e4fa777fcb82d44399e502dec5bebc9fb46fac7bad367d9f265bba4" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="36774f414eb06c6b775886dc47084cc15639a476734425dac649f7dabc864de0" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="deea4a80f230e9383db8e919fe2182364769acc7be6dbf422418ed84f744c543" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="5d20f64da710a8281e2b6c7af55ebd73116e0106ea3610a9907a80519f014de3" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="3bda07ec0f53e26a1c369f5955253a82819f7bf3912d183670eb5bd770ce9ec3" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="90d0fbd75cb4bcc0d64f202fce796bc6f6ea4b84c1d14765daaf8d2e596175d2" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="0fea245f2eb2fe1b1e9adf55ee745d87d74ba2c34607d784ba5bd79f286818ca" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ec722b246176df37f77fb678109d5eec9bcf3697004a4ea2d571dc935cdb9b5d" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="d5a7e5d02d23cd40d5270bb25145d759dcc3bcbf05f4f7a660f09f6abb7b91e3" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="aafa082912c50b7097c99dd8c828d8880fb60af9ebe2d2c195f534429edd7d0d" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="5d635923704d01a708a9eabb04122ea4fb8b3045032285bacae417244aeda327" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="18645c0a7ff1451da8883fb74cbd73426c2dd8360022412d1a04eb2b7690a3f1" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="c0eecea48e486bc0e248a184cec9366a7d4169513ddf25ef08f5d58737719152" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="1353a344c90fea7cd8f5affb68abe121df2e707dcf0419f2c860daec2bc33ca6" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="a38d9301b201bd7a2067617f6d314750c75506e2698cf305012222b2d92ff7cd" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="d09f9dd74b1a32e13063b757d04064983029fe93351f8efcd67f2cadd209c2f9" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="3c547155f170975a4692e0051125e9138485c8ef30612ea321a245dfaebd6731" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="47eca488788f199a679ef5dbf81bbe8b6406e4dd4447d238e672dbe31fff9076" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="cb3917c7c23f91531b209a3be38a14bf1214f7284dcc8db556e3f1df528c67d9" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="2b6a307029f479d3e24366ef0e104aa98f95f652c18ea395fd7fd369d151e551" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="fe70735f8f238e6cef20ccb851f2f474f36598697665d135b8214d428f870830" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="0891480d92db408fc629bf9aa9549d3cb1f8036093993c60af1d21166923794a" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="f0968676dc34bd7643fc977f78c0a24ed6485b05e4a180b7a367af11d2d98c84" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="551eecc6d7c9d71bd4808d0f7db56d532e95c23f33ccd45e9e3253101ba019f5" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="cbe970b5204b6cbdd4a466ec829b41adac13262a6b65ac1002ab66a8a0e5ec1c" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a382a4a67e29bf06494839f4829e224db13d4e3f0ee9d4a3ab46f5b604987a6c" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="df945323ac307cbba8d8f0602bf43d359a33014790c40ba812f8df0f68f9c9b4" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="2770ac8bf02ff3759d88c24d095239e51ca99749aa82049bbc38df976252d525" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="d2ce54e9f0229bbf1dc97ec65f4f43286dc52941a1ca2c5376bcf72275120cb5" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="282ec767777fe7a90e91e2c886105f102f5a0b6ae4a50b8436a97a0059505168" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="ad1d00519eae91a32107dc611516434cb8d006afee064000ece40030cc521326" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e4741dd2591e06f6cd28370a5842968218742206eb9497e1dede82dac9182879" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="0c544a0eb0562900c9f4073ebbc7a6f859d225ef925f5b46125edf66fd1de7f0" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="f8c98d3fae260a334feda1461e3e118f5514876f6b594372ce8ef3bcd3172113" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="af9fa83400a82d742b47ab02c908fb6921f7d72cc700952bb805a3317c60f530" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="66a36727ff638273f814de1d9bbfd64cf18da8f8b0fbc1f2465bc7ec529091f7" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="3999dcaca6b033248fb5ea848123483ddabb4afea32752ffaf420f1d85e108fc" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="23831e8c3880872a38e457c8633d53e8ed80bee3e6b38c858522b08edbd80054" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="d773cd1cc069109b2ede8f3582029003580cdab44b5cde586b34a0ce8eed7c94" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="b36e6f4a7114df9543e81be8d43ae54dccec3e7429a84b428f99a184c5104e98" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="58fecfb8bebddb51d830d42b43e81fb919c2392e20fcf02e25355100d2a4fd9b" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="2a0c3d8b2161e14048c2510b8f54898bd64d2585009e02803cc52f859e559f61" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="2d8db636f73621224e6961b656d7c228fc883d54a59de359d44eb28952c33651" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b8f08158e4b578fc40dd0db4d48b29f51bd753adc644178ff5ec80d65942f4b2" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="3851d5550c0b47744456b390383d15a51fb6882e2fa2685b0b98a3a66a91fc60" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="f02419542f05864c674d1f4da81032ba454b11ac8175737ec032358a4f0fbc29" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="5b7e6d8cc6c78eae289c3e78afb92684d6e8efb78ec9332476102c2d5642a073" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="b35cd874d5104088d23367b93252688fbb5c45ec98d407689709a95c3fefbd06" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="d349cf1358da3569d1e156c72d363d2547afe221c32b24f974ea0049fc30e02d" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a8d6057ea1e3ee9d3b2baa94109e5987fda2772bab3739f09300608ab27036f7" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="9c4b040ec5f49ab6243d99ee91cdbf3842dd8854dcce5647a64bb7c9bded4847" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="4af087a790c3d83a6259f3b7d0d1c5ecb61fd2dcf1358c8d50a2817452a73739" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="c174d48b7e38921acd7359c94d3b09418e37687fd8c135798b5b57182e42dd45" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="437755aa9c31d04892faaa32c239aba972ad9f5be7e696515e14c745ac135267" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="30bab7a3732bbb4b2b046d9adf17d3020e0f8be6474f82f86f07ab70b9331180" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c0e960d0536d90e76d7ae0905d8d0e76bb7321806e29cfef6de6e0bddd8067ad" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="03517d0ccdcfd8397394897f0a49faf73e940ed7ae0e501916e4e79d451a8674" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="2cf999b1ba310723f4e9a5628327bb5a8b7356653047f2357edcf01e9f1362d8" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="b92c23fb2f78a014483ec112c79725f035559268dfa9bea5ae0cd8d039c2786b" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="a6bc0e39f04016370f30788a6a3c71247a465a81ff3bc1ea121b73804ac17c79" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="66033b292fbe5f628c6c44271ac07f0481a49ee578e11c675c362f849e529b4b" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="0f6d5338b9e28ce322a840a47db3dd7d6745b1566492b0d21ff84cd1fb310c93" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="3435de4e1542a6de3ffb96c680bc5479ea8bfa605d42d286b4c95755a2641fdc" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="6507ddd94dbc6415ab003f66eb8fad1b98db4d2addc22ebf1a3a7305af67d016" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="5149c9d51327ce731249cfa1f99ebbecf89405da3a2b4c13f2ea9d86e15942e6" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="19aaeeb792cce98dad1b06c28d3eef281a3377dbbd36436faf566c85dc4620b6" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="774001b6e29b0d2d560e0211d78735b12caf0e073a545c8eab8e236a450ec044" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="008d3665c60f28ab138bd2e1b9b9d62cc788893dd7940c32430fedf919acb55e" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="482340c274f612a3c2d79727d2b61adfeacff1314c2d8b233a2789776057a064" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="68105757638448256de550e6595158684a01fd691bfbc2a0e1f6fef406b42cc6" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="01a7bcbfbcf1f21e3888b40712b366de6b1cc82176838ad6be1e28e0c1be5e7c" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="98626cbfdab9e4fd01cb7d9093a1666ac86c5360543f8d307a74d4c89d52a3e9" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="00af3817bb5533b14eff49b01a5b3bd6d379dd535e26806d0fab6f21db37ae8d" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="9664e48d19d444ba2e89a5e7aec6402f98bde39160b8a36fe03ccd66fd4041f3" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="91c49e4c644be04cd64a9abe71447603cc1aa845009858071f184bd47e867ee4" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="29ca060100c8b22f0c067f05425b7630fdc944a699bfd9e0d39956d2d436e7ab" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="aa9fb924468e87ef79f2b37cdae7ee9a286da6a7d6fda627c1e1461990089c49" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="7e454c6e61df25f9774cfaad276ba835e933c2fdb61e8b035e4b0c6b48ebc1bf" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="1ea763a825df38f27266a52ec548c8fc44cf0a3eeb2dae829d9e856b1b9cab0a" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ba3571fc3aa86ca09c778adf0f600550845db8f0e459954f196c26c2726984f6" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="63a81516f47ed84d19376e30fe20588b1b9d89fd6849cfdbf633dad69c8e1160" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="87033d2f0daa4e37e9521ffe3f7658080479876c5258b795e03a4134224bfe86" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="a1ac341754a5d173626b6a49e4421377382223686e993dc67bc4ed36593b0901" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="e41a9c1dac1e2718ebd4963334868d0bbedfab1370775e54107237874bc2a636" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="08227f479b1cedaa37f92f48274dfd3c8e0f6ec784ec952f018c5123b945d9e8" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="026c80c435bec1b5baf7cc23551d8c407f0c560d71ed15001b110907c12596dd" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="3844491c03f24c54283fd915716584b06a14c84100e64cd074e3c2c9f90cf5da" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="7861c1397b8047b03d147c582c2757645bbc8045b0478c637d3f1645ae299dfc" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="e9ead285c7ed2494eb349f92f6a40575b4f2d015db0e63b868092cdae6610061" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="49a9f54c0e782195291cf00704c039f1961edc6ddaf183fa52043166c536776e" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="6e91eb9c2032c7b352b095c4460ffb758ba8bd0fe2efd0e4a4ece6796c8bcb01" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="05d9b52e1f6c0a69bdc63bacbe0a0c1e3246bdc62a0ed6397621f88e5bb26b1a" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7d725de900eea0f971c8222af170aa506d7019483b8b57f59669dd81902da9c2" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="f71a69a33a350bf93e6c9889c19491582cbc8a420b4e75ffd085c0b01f8c8354" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="b770dd76cbba6a28ad9d64bc05d0c4282367a74b7b8333dc47362a0879b7e6aa" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="85aabe07c71136ca02f126a0e8de3cf8815753570b58729300574f620529edfe" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="3116421bc1f24c1bef4e589bf9bfe8dde411bff18e07cb77d7e70af457afacd2" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="910d0d41e82d5c8cc295dcc421ef09e9717a5975132a77022243a61a7fc34810" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="73696554cf5d58a0e48131a6fe2b6a6c38b639ecea595401a45be1ae9adfa98d" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="67940d42d45538469f2cc7b53d3e48d8b05e3eaee6f22cd087663156926316e0" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="c68dbbdee5c4705e2f34999883cf03d28f436c7f21678bd762e8db08f0667dc6" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="5ef04e10741da407d404a939a4f7e932cc1027016d212a842b7c6ed778f37d98" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="d6d17d23765be5256dc7062ba4c074d34ef8e66247b4bc44917beed0fcbc2250" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c33676c2df5eb3e76011b5dcdb482c6e503d14f9feda5aa271421d154f28dc3a" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="29dcbc92ac96e9007ea97916419ac83d0e86da75ad1648d604e39f2353b33b15" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="7ce1beecef80c9302ccc57a6f6cd6f33dc7e842a6da9eb487c484f92255d0286" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="72b39cb151a8f38de69a050b33c5fd2a9248fee76ebedc542789da5e1ff9bdad" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="15d30a9c400f9dabd1026a1692bbea82908e900df571ed170e8d68b872e9f7b9" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="f05acb018de9f2b358bd68d8d5f1793d794bd538792d6249fa6b0066b199c8eb" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="7f6b12d080a3b9414d4bf9e82549f6210aeb31cd9ec21f2ccee040b472437205" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="08847f982af692fb151af5d57af9285125b17837ee2ceb4f0282d8aa0e235813" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="52cf90b6dfd777df7f39ed7991c10f16384690faa244df3cc0e2bdced3de8a8a" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="847dd0103f9c846d365d75080179d755fb69902b8fbbb01836b843cac34c7138" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="6c64761c207c7338df1f630eb342f1e781709ddafdd011d953f0e3630cdf0c0b" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="a80887418576453c32be752638cc27e8e0d59594c86a3dd9311a789e7053daab" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="5a3ccdddd7a03f5ead449886a93799555346aa36b1a4753cc73db89ee8496b21" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="539cad4836decc5842c767267f9c33c8a2266796183a3276bd564da7b76d0fde" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="5a24ea0cc1344b440f31a78c6bf110678085d4eb36b077d29ca6a8f1633c7ec8" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="82658a523693ce463c586071f1fe813d920593009730cac43752b2ab89564df3" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="b0439e431bd61edfe8c9e5c20914c1d4c7eb4a05bda106e8765e8e979dea2e8f" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="3c567a234b225c3dd8138bb933b4f67399c88cdbd673f458b8135f6cf132c567" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="fc9a1fb7052dd781fd0b2ef074502a9c86f458f06392b45ac027c0367b1da453" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="9990c4bb16722e3047ae911a7cfc68f75d4688409615e66e14800c8ffdec3718" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="9a83ad172416b0718a165489e42e4637fbe7d76dbc12e9e2ff126ccf62dc9de9" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="3f892b2703d30cd65f518a9ebbba7e1bb62be6654bdc6e553fdfa1894dbff603" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="77784ce4b56db0fd5d26b6d6963ba97d5b478d3d4bc5a0440566a4bc37795597" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="c6de8b63e6c1497812f207fac2249d71b2279d7bbbfd2e378741d6ec3f690cac" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="927ffa067ef25c2c383b3cb66b485392406b1066572acdd9faa8b6fa5426df2b" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="bf131302debf89c967ba55359d247aca3d87c2e79c4eeb5d6eb4a6491ccfe2e9" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="3829218732eed2bb5d240a43f1ab273fae1be45d7d400f70f863e1f7a2005c11" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="6d2aec18ba186b53a9e4a2ef8b83c3804c643d5e43b12f755b0b12f911c23ae7" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="8b661ff1ae6e6c81bd1a42510e904d1cefd6a2ddce7798263b78b38fa080941e" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="0590f3e5508c0f535b24466c5ecc9e4778e6ee5ed4b2a60ec1bdbc559449a709" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="8033fdc33f4ae32aa321ee3f8f71c4d13d65cf1b8087c5b82cb26ba2af5e608f" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="3c4558e3a3eacc66b05ff0ac824e39b172cd58c101a6a6c394953e0f6d55f8a7" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="91606e26c3341b4cfc7560e32455bf42b71bd49584aff9b82f235ce752ccddfe" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="e9d066e0669ddb2052e50a0e2339e1b4dd77810489a4ba024c59150238e208d1" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="765c41eee9c068fb52049138c3e1f666f2800ee21e17b12333def2a93ab9f4e4" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="a3bb1413b39df6a3538e02674a8a272894f108fc1f3c61e31159b11c5b35ec16" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="a5243bebc6fa91f9324837754bf91e9f5fbe1a793c91e1f578faf636c57c7f47" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="bde89e8c9785cc39fba9d09408671812e7c54edc312efb70c97ac80fc57b1b04" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="358109ee7fba2ff278e7a50189048236e554a7c8f03faa3fc556ea1708393020" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="763ee578868d69e153a99945f53225362bf9fbd2c22e9dcea608b1e9e882c277" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="9504e75858e25326efb823d0f2405e2279ba7fa8caed32baa80b48b2372bcde2" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="46440c6747563d911359b6800734f9b82962f911e443edfe175780bc74443460" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="9c10e1aa4aade89dc82f618e7f29bafc4b57ef26b5bbb460fdc175d99b18aa99" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="484559428d3573ec4bdb6a04a1e1204da17a9b55fd3cfe3d1ba883a734d51762" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="3f71b8767b0746f08c425829c0e7578147579689818d2bcd677b751c66af0d3f" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="fc1adfac251669d6730e3d11b338e2258e7a117103d91bc8ae1a87601f4e0722" name="libvirt-python" arch="ppc64le">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="08e0599b7d25140c7ec323f9fd866a4129a714b7e77b284a9c146f5e8afe5bc5" name="libwbclient" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b88eaafc782ef73a5790d91da0fa62cf7cfb095d7ebc9e9680cd2f3c9f9fd0aa" name="libwbclient" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="29c8116cf3e108361e24dee65ef1972aa8c5dcc38933cad7f338a1de55aaeb42" name="libwbclient" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="ca1dea2577eee8f5bb3ef368f3651cf9d3e368241eb668a443a87324c40f93cd" name="libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="09b249ddb3c72f80d8ff70f4c2ccf608384bb7080f3421ec36b72a2210284d9a" name="libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="615522ab638e565beff4b73edbc5ac4b94a2f950fdd897e5d678a21af6a45cd7" name="libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="76613b66f1615c9b71e23b2c0ecc9eac22a8a68570ebc4fdf3ab00dd60489626" name="linuxptp" arch="ppc64le">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="6230461e498d3fdb768f355a70d62e38ca50efa588ef43ebc6633686a2c8328c" name="log4j" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="56768e2dfa8216dfe65b46ebab9c6df0a19bc4d87e99f112f018e39ad872ddbe" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="ec9aaee54bd9b444f40141729440c58396fdd645bc26d74e006dce1b8b425552" name="log4j-manual" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="06e4110ce66feec1ab1e631ce553cd51cb191722c1d67fe8899feec7f2921c01" name="lsvpd" arch="ppc64le">
  <version epoch="0" ver="1.7.8" rel="2.el7_4"/>
  <changelog author="Jakub &#x10C;ajka &lt;jcajka@redhat.com&gt; - 1.7.4-1" date="1408622400">- Resolves: #1088597 - [7.1 FEAT] lsvpd package update - ppc64
- Resolves: #1124004 - lsvpd needs ppc64le added to ExclusiveArch</changelog>
  <changelog author="Jakub &#x10C;ajka &lt;jcajka@redhat.com&gt; - 1.7.5-1" date="1409832000">- Related: #1088597 - [7.1 FEAT] lsvpd package update - ppc64
- Rebase to 1.7.5</changelog>
  <changelog author="Jakub &#x10C;ajka &lt;jcajka@redhat.com&gt; - 1.7.5-2" date="1415620800">- Related: #1161551 - librtas package update - rebuild</changelog>
  <changelog author="Jakub &#x10C;ajka &lt;jcajka@redhat.com&gt; - 1.7.5-3" date="1418644800">- Resolves: #1174174 - lsvpd to report "Not supported on PowerKVM guest"</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 1.7.5-4" date="1444651200">- Fixing syntax error when running vpdupdate (#1184517)
- Cleaning the spec file
- Fixing bogus dates in the changelog
- Resolves: #1184517</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 1.7.7-1" date="1460635200">- Patches removed, fix available in 1.7.7 release
- Resolves: #1182030 - lsvpd package update
- Resolves: #1275415 - Houston LR in SRIOV mode, failed to configured eth* on RHEL-LE</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 1.7.7-2" date="1465819200">- Resolves: #1344202 - STC860:Tuleta:Ohiofp1:lsvpd error reported on RHEL7.2 LE</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 1.7.7-3" date="1490011200">- Related: #1380656 - Rebuild due to soname change in librtas</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 1.7.8-1" date="1490270400">- Resolves: #1380652 - package update to 1.7.8</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 1.7.8-2" date="1508241600">- Resolves: #1502998 - vpdupdate aborts due to EIO on read of sysfs vpd file</changelog>
</package>
<package pkgid="d93733735d6bc7b04b81c7eccb8bd358be7578291e27db2ae854080c1810e3c3" name="mercurial" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="64cf0d7d9a5b542117e8b9921fd64e8c6b061bd7898db70bc83b736aaa1683f5" name="mercurial-hgk" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="015a9cde4fb3d1a37c6d4a4dc381db5d4e6ffb6150bde0833276adf7693cb478" name="mod_dav_svn" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="06effd32ac05c90cc7dbe73bcb7746c2bae55abe35fbeb0f4209e2e17ccc8d77" name="mod_fcgid" arch="ppc64le">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="c1892a26d6a0cbe614b40baa6e81bbcd4eb370804f3069aded8be341e5f7ad4a" name="mod_ldap" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="dfbd3230bac59c90da48e942afbdea8701c86a07ef73dc53793d1f52e1685b11" name="mod_ldap" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c16b08d58a3635a33192ea3e3c26dc8def9af658887005d3a38b7252fa776b47" name="mod_ldap" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f764fcb90018c2119c186cd467b8eae7890fc5066961ed20f075728a45b104cb" name="mod_nss" arch="ppc64le">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="ce2af4974f3be3123a133d0e98fad89d885f51aae01fae8cc5b5e70a71d12b1f" name="mod_proxy_html" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4ae31f10bd7402b539d4c054e8738fc72d365e682ce7f85a4d4aebc49d8a0873" name="mod_proxy_html" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e0994ca872600f8d840c83b92dcda0fc16e42a78bd9c6da9374533780e44b317" name="mod_proxy_html" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8d61e5aa5582c5b5d25c7a8b929c3aee0dddb9524672f157aa4dbbb563734ab1" name="mod_session" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e79ebb68a963c862413c123505184272833f321421531c3ae5603101ad0a5977" name="mod_session" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7927e815beaaa07b4192de8a4591a56d091d4ee3a1fb9baea2d34ce4649a0343" name="mod_session" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="85094c08e21ceadbbc19c7dceff49548466bbbe2c8362808130a4e75ebd8b513" name="mod_ssl" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="fe358619048ace6cfb31d63e2b9b0d2d6f114728eb61b9f5f414f802bcb8b632" name="mod_ssl" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8b628116538983dc4a15500c1871d1d184f97e8171811e00c13f41461268785f" name="mod_ssl" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="46c78dafc3d4cce1c3b6ebb9106bb8372fd5072c3fa9d74065e439802caffa78" name="motif" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="42fdbc5140a0baeaa1c09593c04a62fb1f9226f4c32a01852c5d5a978abcc4c9" name="motif" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="bc2bc28c14d589564411c64467bbb5eb59611d90af3f368e1c07c7e9fa8f7201" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="9fea8662fda037b7de3c9426a5c715276ac67afff42ff0aa1305eac6b856d355" name="motif-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="4d62e05eb030e2dcda45bd987ad80da42e18c545ba5b75b150512eb755e510b0" name="motif-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="9fdd84aa2fd230aa311c4458e5ee11188246f696f4df2bc43a4420850e229349" name="motif-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="e7afa601b11e55738bcd05c77fd9e1c7f045a91e6e36ec11196fc59d1ae16857" name="motif-static" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="f0607b9ecef849902f95f9caeacd1baed803e81ce2918c8c0bf750816fdc8087" name="motif-static" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="fd81c86da19db32cba779e67ac8f55e148acbbf4ee1dacc7996eb438ea2f244c" name="mutter" arch="ppc64le">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="d292af1a254c7368af44d4608445fa9043fa45b72ef64273f34b373095f56c4d" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="9468b3e46037f2364f179c426cd66822b206bcffc7cc6b9914eb235debba8ceb" name="nautilus" arch="ppc64le">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="5581e36d56e86d6caa36eb707bed74e389512305793eaf29f264b499b1404000" name="nautilus" arch="src">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="ab176dbb053d04d4857a27332d84ae0872fa7f4677cf7d83e752cc00acedad74" name="nautilus-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="42e660a4c9c3e1561d2449a1534838fa2d9c2b5431fec0dc1b2240f981579754" name="nautilus-devel" arch="ppc64le">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="f7ca76ae39eeabbefe5ceb84da8c89055b1b19322a112273bec68050939b8ece" name="nautilus-extensions" arch="ppc64le">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="80d3338614967afaf081922cbf07b01e947e584f157aa441e8ad773db05297df" name="ncurses" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="9b008b5d10b431676ac53ee028c3f4349cc56b9f8dc831569b9ac95d1603c802" name="ncurses-base" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="796a3c226b0b7ddd650c7fe678ed22390024969c59c7f52d5077770f7c30b401" name="ncurses-devel" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="1396661fb51b730e30d12c7950f9bbaf8f8255b19baac94a5bb0cde6ca7e4122" name="ncurses-libs" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="1156e8aa007ffc5e07b0a01b9bdd6f8d59c003aac8ff915281545634794a37b4" name="ncurses-static" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="ceeba61922c42d3a659b61c37cac5ca7437fee6d0630f1f6f9d93183cfe293a7" name="ncurses-term" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="52b7fe09347310d49e8798c956a76c6a684a16e8d3b08901554ffe06efd55f77" name="net-snmp" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="0121670ea1daec361ff78f21914dad87d04f6d2aef07b80a5443b3762a3e485e" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="cec8849f7d58cad29451933ff9883b6c206c1c1ae21c22e286d2ae52f65adfce" name="net-snmp-agent-libs" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="83c260d037a57cf526f58277be48d0a39f8b628a0ca8376f8df6559272b85805" name="net-snmp-debuginfo" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="8a529524d5f93879b00ef703a16653e9c373c63233d5d597d5a2cd628902ec91" name="net-snmp-devel" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="2e613785b0c2ce2d77223e94d9d31f6d20c5e71ac6ac58ad7af883448104a4f1" name="net-snmp-gui" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="53f03ca4a988d5857cee7abb358d03d7a771382bd45b0951220f7dd3a72a0a6f" name="net-snmp-libs" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="c441f8e949d9dcc20f9317bfbddf688590e59230799297ac64cd6cd70713c1a8" name="net-snmp-perl" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="0d3900b95c5b086a455b8c490e2e6abd9a6a4df4fa22a4980e68869f39db4d55" name="net-snmp-python" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="5c6484c64cc6e8b40f196c915f45a45356e02cc4844e2abc24f22e1ddd474e28" name="net-snmp-sysvinit" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="164e701954a931e468be7cf4737318df7d814698a8e809dd4be60e22c5322610" name="net-snmp-utils" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="0c355578120a4623c206960e4d6e7587323cd6c10e47b2d4007f0b3bfcb7132b" name="nfs-utils" arch="ppc64le">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="f74e47bc2de09fe54537c2b4af2e316577acac0ed0c877778c45714f0cda8c09" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="c0ebce64f775044b9aeaef121d675949fa69256e397d25e44211492b87131e01" name="nfs-utils" arch="ppc64le">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="fcdd43c8c1d0b5e687c28f31089bb7d24242e68587ec0b34338f3e1ebf69bc38" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="1d22ede1d232e0f03bfd63e0a30e381d347d32db2cae6e0478bf21b11500439f" name="nfs-utils" arch="ppc64le">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="f902eebe9ecc3de2ae0e3bf11b87f7f83167f987cebddcfd4de49c49c2e0a0b5" name="nfs-utils-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="92fbcea975b3b7636a1348ded9a7a8f78f3e751e92bdba2fbcb81291c2c50428" name="nfs-utils-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="4d4b334c517b5f3eaeeaac05ce00482b71b51b7d4f20c0f81fbc5b9abdc63251" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="b0758037e7079063bec6c3d1a07bca974ada4ce82db6d9ba0a5bdecb1af72dce" name="nss" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="07d31d51016b2e7bc82b303de3ff79cc746cb6dff489c091d8bc7d0073578239" name="nss" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="275cbe9e2a3450426c683073f8963ab9357d7673ec434a479f2327d579c24d05" name="nss" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="f431aceb2643da2caf1fddbd4a34fc873a79415160d5288495ce54b7ad813d82" name="nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="f01705d0b67909ea47fb3c8448960b7e888624c5d3e31cab6c84898122fef70c" name="nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="6453260de7875244834675c86160ab09353669d94f465ace5ba5da99520e46fa" name="nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="4988d69998bdd44756db8b55659ec5f7d4696fff763839e039ae966c5b372fd3" name="nss-pkcs11-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="358ef03fbaefeb7fbdfed941c46bdab60b154ede674b520798844ce48ec265ca" name="nss-pkcs11-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="570da66ae874c95974080a1c032454f5f6403796288d59e361c63f2e5a1bf31f" name="nss-pkcs11-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="64d71d549964cef2bae43a652098bc905ed9e6c548e436b9c806a5b18a02f239" name="nss-softokn" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="9f7de0502a0a010e52eaf27f77a21bdd27766d00c49f32386d0be1a9239ba422" name="nss-softokn-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="712ec735ab030a90c548efa3b5b49d9e47f99b228be76a915e888557af15dad4" name="nss-softokn-freebl" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="9bde9bbe883fdca080c937cf805e20f148d1728d407ed0de65e99513f4d55ba5" name="nss-softokn-freebl-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="1ca2e81a6c870096b8c8cdfd4593111c1f1434a5163f5e78c8b6b6dbc9a9ec59" name="nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="167fccff8f58ca8ae2de5f1c5bfd5c22ac3201c3e68ed1bbd7da9b514e573cd9" name="nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="7076b6dd386e2a831cca31ba4764d89d2d3f7ee6d4fd0206cc246d05f8b0926c" name="nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="7b3b10d75f3b8354d5d5238fbd8da41ded155e0a252481fbbaa66d99d30b00be" name="nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="291e4bb266227e847fda417506e1c122305d4543a9d2c8855ffbdaecb5b9c18a" name="nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="681ff06677523b0b8c93e2f6785b7e38af06d1277a4b4a5eb882ebd4c00a7d24" name="nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="d6a151c4de2a7b0bfcdd6454854aba39276600729e6adb6b6559edd99032cd88" name="openscap" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="fcb80a3eba00f34aa92d806f32008f2e4733c0f504424ed095c15b20ff9a2dbe" name="openscap" arch="src">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="b10eeedfb02aba7d1834442ec718ce691a6894df7a79d159868b26a971e5f603" name="openscap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="4960f561d43f14fc6921367530b583d4d3b4bf8d90ccacdd8b6062fc564e4c2f" name="openscap-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="4e67d3f2699f978a13cddbef04c77b91ee9979a6ac4327a11680a87aa16db3a5" name="openscap-engine-sce" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="83c8582deec59ac1e8b1d59a354ec13b9e05eac5addb9a98278f63e304d568e0" name="openscap-engine-sce-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="5db0ca6d9fdc2152775957529c1d121229424529d38af882c268f9bef3177db5" name="openscap-extra-probes" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="7c7ef45e3d73252f57d679bf196ec44d3a8950984e4fb7c06aea81b89688d74f" name="openscap-python" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="93cad363d4e6d3f0d41ca70f6ce6617294a923738552d0806df51370079dc3bb" name="openscap-scanner" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="ebd845e7a703c91b33f499de71dc3310ef00938195b4c7ce1052ec7b4a2f36d2" name="openscap-utils" arch="ppc64le">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="a5819e7882186e777fa2c232f8eabc32eb819799d5e2c09cb998c4276aab7169" name="openssh" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="20fd4502f848c4761a32ca9306bba5910a0926ea42244cd3494a5a7f55474b84" name="openssh" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="1086a3ae9649e9a79576d60f39d70e7c40fc152ae9739fbce34e6fdf6ecb7934" name="openssh-askpass" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="c1ba356eef726e7c0db8df3f9d2fa56a46b7dc573d8cb9db2f87434c1beb0bae" name="openssh-askpass" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="67a3e4779d46e702199de8d364e8465057a7d60a0f1b08c833c4f6f20ca8b378" name="openssh-cavs" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="867580952a1db6d4a50f65830645445138bf861a86a9802093d60e7ff15913dd" name="openssh-cavs" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="17000c6f6547a5a705853deff8ffe2fc63189a086dcfa102cd7df02f05f0d5f8" name="openssh-clients" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="3548dcab160ee26f3d22e240417353e879e589ff6eb139d2553386250719f9eb" name="openssh-clients" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="12208adb8bf87e41b2cb0b44a410efd3097258d04ec084f5d9d9d3f50feee032" name="openssh-keycat" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="6ad9e325362a6a10c245d7e0a493bb33cdc4760ac2fa09091280790616a7eee2" name="openssh-keycat" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="32f436df13cfcd5958d7f270c8154a5d1c39fac7a428cb1ccaaea953944e524a" name="openssh-ldap" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="ed117aac9ff0d1e4b8328265565b22f7f714d1fcfcabd27d01677adb72e622c4" name="openssh-ldap" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="93eed7940115d67eb1f3a7e6df5e566cb553840a4664abff1fac745ea1c94f93" name="openssh-server" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="032f2d63bb75c552e8e3ceb8433f219fffce3a941b8a402e364a74fc6644f243" name="openssh-server" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="44b9f15cd3a605ac606354955005c6930206b50100f03e0229fc838a27209c09" name="openssh-server-sysvinit" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="6aa044d93d18210c957ec23de707f7d42de77f95de8f70795feeb51b60476115" name="openssh-server-sysvinit" arch="ppc64le">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="b738264b99ec7b1636af6850f61d17a4bef2a56f3bc5b04365025709281d327e" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="c24af341029c150393cfdaa50b2c1863a52e9fa0fd1fb3b497e526515350c5b0" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="46949612bc361c8a6c74dc174d7dff62824c474844039e15330735c123aed2e9" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="887c086294d2aa2bba450ed4b3856cf1f878447512a094522c5c1288c11adabb" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="9c1471c77bcd27c199b007dcf555b0bb639c499243d734cae61a7cd16e4b0c97" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="99df05cc38f32446e736eee2f5d1a1f4e90d3e56c9149944c2aa35f38d62c59c" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="05c6328bca9cb60fd3e25f50ce334e23ec5b219f5fb3326332d376740e8426b5" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="f186d0c1fb68cfcad2da3b0f210f96a01285e5e1b365c7bc8cb7d827d3ecb790" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="7de24fd77164d60b5f05bf5dc0ea9d5b9974b3e614d896124939c824a0310683" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="0e957ce71a997a9033fb8256b72424028c1f9e5d41d319b6e96f9a0ceeaf92fa" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="2f07493eeb1a64d6b66de27ca66927135b2f81f9034db3d767ab169d40169430" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="64ba647944577f47dde58296799af4a9728652a2c047e2f998156aae635fb8ad" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="78a54b9b96dbc8c76150c6b843cccac7927d6eba39332852125c50b883700546" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="7db7aae577aa5ffd330948069442e47970e4700847541f73961a426def05887e" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="f04cf5014160ec212d24ec76483e57c557582e52f9eb6a111f61bc65265c6baf" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="fd802e3ad64899babe9258142bddd8671fdcba17573e0832ded5676b4f82a297" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="7e460a3edc61eb6a27f2605f76ab1157b842419f402eb4ae5c2b427d79b034ab" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="cbbb8bfb2b6d576a59c20f0ff576cb920c1c1fb7cc8cfe8ec800f9ee9ef7c6b0" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="c06981be59160cbb266c9afe6de03e5f8feb65eea95626eb123bc83e6dfdecc7" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="67b186d17fa8a35743a2baee7c70874b281ad3445635ffcca374bfc2ba549f7f" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="2161da2b85d516db35685ebb70e2bef788c1531b20ed45d29e61002f1b214dd0" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="d66acdd27cadfff0534682940006c9cbb7d602ecfe4c5f28e62aca6828696edd" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="073a3b4ba1cc12ae66f4925799a6a94572957d8633834c334905127b3dedc1c7" name="pacemaker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="8e4e3f325c4137ca9bcea922f6ed125bfc970ede9a2df5836033c289e74a6e60" name="pacemaker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="66faa15170367dd01b91bff0eb7bd490b7c3c8cf3e0bd3f50080e7499f5538fb" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="8332a909b2449e64c766f1c7105ed22acfbf3a84b3f531687eade40a066d7736" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="5a33f8ce11ef3f8b0eb8789dd8f1bffadab176e4f2ccdcf75d992ac6110d635c" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="c32355a5f298ec551a7fa920acc7811adb3f1c4ccb01499384f4f040b46a3e7b" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="ca7881f1797b40f008fb351c01a1b39e5bc4efe82009ab2c1fc2f070141b75ac" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="f89db5da7551fb4dd4d5c780c07c06031816248cf7f1d2f84b2c9cd91292dcad" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="893804021280d4adf9ae43b65ccb66b6a3242358f1951be37bf5e3db22efcb7e" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="b5accf6af7fbd3895eacedcff15611ddaf5a62e51e8d99cf80f53b8c0ff1a725" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="49aded2a950b98f936154343b699d1ec84f89e7e963374de3d391d086037ef6a" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="79b2cbcd0f1103389d0e2779676610db7348287d993f541ae47af1290cdd23d8" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="b4a564617477946fe77ca026ccea3f024d9fea1c75b767e08811a2ce9937dd76" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="e12abc326e0e8ecd463575affa7236f5ea563f20002f625446a20b1983b6197f" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="614d2441bcbd451df05659c13aa2e0cec15ba97f4f360f40a9fda9c298e4bed5" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="42950284138c11f2af930d078dfe5920ed481f3bb256f4fd14eaed579e0bfd6d" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="795513c5f54f687f7acca55a3984424d310fe987f3ab9c09311635a299f08c52" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="b25f9ff7e2b2ab013455713332f0e21d265be82e746ca2cfca0882c471eec2ac" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="b9a4578bb6fc4813964c60b3d2b547be52ce362cca823740f97b2dbe633b3bb0" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="77eddfb9b9497852add34cd0cb68cda3b7be393963853fb6ec8ebfb2d3cd6cc2" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="b7a8a65f44d46746dd3207b9454d1921b8867f37858c3bdc80860130842f3f81" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="b259fb1a5c84cd2d62c6be95ea86594f85a16f2e07c4bb24b4c7e858fcf5b98c" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="c0497155db36b3afbc8e6132382c644b238cb546fc4493097c23171457333248" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="fadb199adeac2910c51d8c631adb8cb961252d2316f540886fe58bf425c2f35a" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="d40d0197a0f1a0f2719e6bf42c407ff84b1b54c733180815f14a36dd372a055f" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="a3d922574f6aea725b471de3970397c6e739e7b10e02f063ead49eaf712c71fa" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="ea5c344b77c657148c0095b013a641a3cb1184c86e4256f6176fc1e613f2a1c8" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="8fd68c4a59966b407df17fabe5f30a310f03a4bdf528e49e7b8e825e5ffafd6f" name="pam_ssh_agent_auth" arch="ppc64le">
  <version epoch="0" ver="0.10.3" rel="1.12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="0039a405f399b96681f6c9573292426c5dc26417375023d28bcef6a5d2ab5548" name="pam_ssh_agent_auth" arch="ppc64le">
  <version epoch="0" ver="0.10.3" rel="1.13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="5cba635b21d0878fc83676aa5291b4b07588f2f6bd678946f1dc6d8488baad69" name="pcs" arch="ppc64le">
  <version epoch="0" ver="0.9.158" rel="6.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.9.158-6.el7_4.1" date="1512043200">- Manually Debreand PCS</changelog>
</package>
<package pkgid="f09eb0fe7f4b513378b1808aeff7b45f77a0b24596ed987aca71dd0b2356ae4b" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="a3115e4ccc1a8f0815fc325e1397a77e0e6c06a86f3e1c2c405987745747f46f" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="fa6787c6c8e5a6bbbd2241bb91458d65018bbeaf3018fc7d9e5d2ef631f10281" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="8f6d875b4a4cb3ec5f55394e98be44173caaa29b3ccac2c68e1e6841786494d3" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="982af70478c9c42d3d7eae5436b16c5cb0bd22db02521e9744ae252b9b4e5944" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="0e807aff4599436d13ab7e2107e9871b3df33b015891956f3ab0afcff2f4edda" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="2bc9118fa7e1e9070b5d20c4509c38ba5862d782711c2a8140cd9db0e69f9892" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="7124496cf374127269c2638e01fd12327d5096cf7a6d99fd7b9b227daa8ba1bf" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="12419af2ae689d10d47732a4ba2f2fa60b98bd082f0eae01fa936a3e48d8ef7a" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="be576dae5378f33fcf9109680430e8a724168919cf823e287cfc0261fe9e8f3e" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="9c5b12e6a5c5770e364ade6a0142c130b26923f33a5aeb511846693342a4d1f7" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="94ac7c400149f2052c44d57b93abd9de0ce519470ba08eadbe01020bbce9339c" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="3051721b0d663b1c5c22bdfbff092c4fbba1774c5fc488cfbad685948ca934c2" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="4f2de7c24675fe2a9b4dabc956fdc3a41483b225c12bd3c7cd88ff730f065786" name="php" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="b8fb10eae6474218ab142b94949a2cc13a4b592ab037d632a8eb78febdcab9a1" name="php" arch="src">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="fb0eb4dd493fcd885b89988ad886789fe0f2309920569d6d6314085b72ebc416" name="php" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="64f3202fd3b1f2f3908e06ca6832e459c682d496fa4653872f80f964c6fb408c" name="php-bcmath" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5d1e36e64bb7c1a558800641d6cb8ee1fdb02ed7bd9135250d49d4cff73d4a1e" name="php-bcmath" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="6458189a6fdde0a468e313656740b71988cf06a0d7163f3a5caa8132687a4d4f" name="php-cli" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="cba95f920f1b8f4553fc563ac1a27df47e9773a0a72bc35de1facaaddd092702" name="php-cli" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="009b579c348c74700dfa5ebc1c669222849cfcc04ffd9d8113338465abf37629" name="php-common" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="082f0ce6e69ec4b8f747b310ee2a184de91421bae30d03ea63e498992d10a35f" name="php-common" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="28afebc6e5458772915a4f65b2b877e1ea31991ec6533b62226501c808b4b175" name="php-dba" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="ca649155aee936b92dd70ca4b73d774e148700c9b1f2a5741689d77fc74750ae" name="php-dba" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="5cbb6d97463f40953606fcc86821017a538e5b6545c5d7249e549b34096b0f0b" name="php-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="a95f3adb1ee10f97c286ca2bc39bf36d5be5443ce020202cde4a27fcccf60704" name="php-devel" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="019ba5bcdd62a89e8b3addc48e48ee26d1d8ec92b41569292f14d59d8a302426" name="php-devel" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="ef1c7f945f30bcbaca7fc66078dfd1f7233fa5ade21ee262d0408b33852adf76" name="php-embedded" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="f1715e07bc4c0ae9d64b9745fbb01fcca5ebd5fccccaaea33af80930dbc50040" name="php-embedded" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="6cb34d6ab895f450fc64042557aa808ea84a3b015050cbbdf56f683412935e9f" name="php-enchant" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="7fb7606e5c90088783bfe882edd027afdee7096f57cb7e9aaa9ef0a952784d0f" name="php-enchant" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="8a5c3a00926410283df51e6e7245397b6c956d5222b0da3d8037dd96fa233693" name="php-fpm" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="9d999c07241850b9dc5d8e38fe7be3da415e679c466c5b4c1748334a5234412a" name="php-fpm" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="0d077eba42e7abf57a5238049f7ad002cd5a3f9d65d9fd6aa54c06b0aeb70601" name="php-gd" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="a2827d50985e89bbd7e9106a1863324a0de2ae0d70202d3cf3e11e84e1c86d80" name="php-gd" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="8d60faecee8b9a7c487d125453524fca300d982d89040625a57dd387ab93c4c7" name="php-intl" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="bb8f151867dcfea878742e9015f7727e96c3791a9b8381da0488987713669765" name="php-intl" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="48b7d543ac4163a68aabc79aae3efb36c082ee20184f4d3733e0ff62f56291e4" name="php-ldap" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="f02d9427c8b310f860f55d9583765a8dada8a5b35290245411496c8b0ae6f7c0" name="php-ldap" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="1a45aa297e55909bad02f831b033ae77f337ab401cb9e550a37d98e4fd71baef" name="php-mbstring" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="1f5b385465fcadd587855987dfb411ed5d2bb19fd4d7c3c17ca13c3aeb791ca1" name="php-mbstring" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="ce7c9268fa9b3688a89a37207437ef87830ac9b269f69515d5bbacf25fae02d5" name="php-mysql" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="809e2086ac2c7a78deeca31711cac06512d24a254e42fa5df9a2e25ac3d513fb" name="php-mysql" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="f66aa509aa7ee44abcd9c3ae0543cda86c7e0cc16985ab7716aefbe18b1211d3" name="php-mysqlnd" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="03ed53ab7e1eb25ae4e2d435ff9c7fe845a4528ce9a8bc1dca3b357b5b394c69" name="php-mysqlnd" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="bf63291c2dbb9a6927dedbcaa00f9fe3ef7bb10f8ee237528608ff8cf24ab1f5" name="php-odbc" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="4b2a6348a75f4bd1b9833d380db39b73fff96921dc292e793fa3f382550f0902" name="php-odbc" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="b34828c3a2bb7650faa4b34e7f866b5b93ccf510cdfd88b0d28d96f50f04a1de" name="php-pdo" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="3bdb6dbe4bf1d14c44f9a1503bacba9a165fc5a937253ebbec510b079a7c6a9b" name="php-pdo" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="eb9d4bd521390b80becf4426252b980ea95cfa0debadb5d7a57953eb4a9d35ad" name="php-pgsql" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="6775a80eb0c645d5693fe7a27ddfbca568f069e1d3246d0fbf19e7b152170402" name="php-pgsql" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="17fc466733b04ec4090d5208ac1c6703ccd11358de8e31466b6af6c1ad8424e3" name="php-process" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="68ff753e4f8e68699fa3e45f6bb0ded9784a7682bc965c74ab15931268336475" name="php-process" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="812e3f124faf3f493990e959b7e35584155e8be2761aa1f2cc148858a901ada3" name="php-pspell" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="2b806324fb251eebd437c9ce58b795f56331eea3181775bcd0f66b49bbaed2a8" name="php-pspell" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="52b7eed67b10dde301af5f00c125d9cf663d143835652f9a0c6f5185d6ac4f77" name="php-recode" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="651d93ddbdb4063e49a5aca61082aa24fa3a5ef39b6de5aa2146818333efcb04" name="php-recode" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="feeeb1e0de2755882ec42fa95cf757c8b190f9a13abed1172c3eec421cf0ba03" name="php-snmp" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="b15e5ec78657420ed5206a2b0f4ea67b870c14612c4765f73ccf3a4ce33ac7c9" name="php-snmp" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="9ccb8dbf033335383e1e16872411d566390704750a05ab151853fb117b59e5b0" name="php-soap" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="c4a97e7ca03dc84070bf6e7b2ceffe7e1d5461b89bc7c84ed7dde9b8bd2805b3" name="php-soap" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="042c3e625e6208c15b10a44185834d951304a058f56d8fbaa316e7a021797e8b" name="php-xml" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="f2d6ff9129536c73cf0685e91ef58487365e78c316dd0137e76dedf6d3f210e5" name="php-xml" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="767d069b500165cfcb24489bc885df204a1242e10bc3b7ab53bcb4baec63e737" name="php-xmlrpc" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="57fe5f4bceddeacbb8856397f709e4b275b3cea3ab55405f0f23b4abdc0dd1cd" name="php-xmlrpc" arch="ppc64le">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="9f3915676407768d9aac618f12ba74e1a88efb56893cf26c99e81e7843055b4f" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="228629701ba22f57356bc1f68ee3802df49d8f72f0b0a95b0ac68fda1a819dfd" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="a931f7ca357883e07f092517548c7ade309eadd60473595556c7cb3191e85ec1" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="754d2505ab0e5daf7580254b4d155b2970338d284d638d4a79495c741ae24923" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="843931b3ea50550041e92a7fee401d9094cdf7fa93a002fa036b3fbbe97787b0" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="f160632fdc012af17f14f2aa65be20f1056d727448c653cccc51f303ed8e6265" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="4b3eceb2c148e4b7f2d61af30efe7df61d5d96c75803a775e4f84c61668f541e" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="a264efe992a9c5091557d7ccaead6edd3af6791ea302f2f6672c1eba2fff48c4" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="68830aa08624568ad0ff60a43ad83ae7ae983459faccbf2d189b4551eb91d774" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="cb5e3ea26fa6f51749c864666369599504d6a74dd6b9fe5f6b5eb2185cdc457c" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="f3ccb23e08f76d8bd55f71568228956fec1703bd5b5c14d001491c458935318d" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="a9234fd52e7356ab96c2d3f3030c44ce500e5833fea7809eaa9b112d9a1c66ca" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="4f7a626b0a9e45643d61b43971c60bef77de4198060e6e7c2c84e7fa3b3e9ff6" name="pki-symkey" arch="ppc64le">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="921ec5486bc66912c1d1249472f82b5715cf450b912891c2798c0ac5b0c13621" name="pki-symkey" arch="ppc64le">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="2a00787d9ead1813bf0cb910ebdaefd6f27c45c34a27fe109aa64aa182d257a3" name="pki-tools" arch="ppc64le">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="b346014c4eb569a2fbbc57d10a1da2aeaadb35cdb68c38fb369494e7142cd4b2" name="pki-tools" arch="ppc64le">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="43883df1b0fad094120c139b470a71907b81a4114a22492658acab37971f6349" name="poppler" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="97ddcbcec001f49b854b0f8294d3eb2d47686dd71e3c2e683bbe533964b51391" name="poppler-cpp" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="ef3b892a0605907743be2d4bbfe5a9770afddbfeb225dd119624fdc95aff0921" name="poppler-cpp-devel" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="9375d23fdf8d415404de11399fe2dd86e7b6474a913be2a85d14fa621e716a77" name="poppler-demos" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="604e195e6bf55ee0f42ee5a0890d03b3d63d7ffe943508e8d214ff4983efcd5b" name="poppler-devel" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="3a3afe3cceb2537ac25adf7aaaaf59a4b78e938ee6c4d496bfa4ccc52874b909" name="poppler-glib" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="4fa335e00f203b7fed6c0e3b17fd96f8b2b23ca00a1e08b13398c88d1180470e" name="poppler-glib-devel" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="77339759ec39e5c6a519a87a96d5d544ef4df8a793df1dd269e72a8458a7fbb9" name="poppler-qt" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="d33ddd39b4baf3a750bf4591ed73244212b77a39e612591fac6407afdec600e7" name="poppler-qt-devel" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="db38f3ba8ed1b2630d25094bc71155dc813ffbc3476dd4d115d172d3e580f4da" name="poppler-utils" arch="ppc64le">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="8f28b6d4d03c31be741b34c1c61a471e5accf6a40617f51b8f6f178a5b1bb7ba" name="postgresql" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="4da27c6b7cf5aac3a57b87ba7951aaa6dd279c91d1108df04affeb314009c6c3" name="postgresql" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="e9d0393ed3b4019cac20d9b813e95904d6a11df2e1d7285cbbd417854d998359" name="postgresql-contrib" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="d73515b7cc7244ab3352f2ab3a7f9fbdf0801a8fb11bee078ae64763e297bf1c" name="postgresql-contrib" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="ca5b8608bd40df36ca6857aa2926cb3a8446baa1428aade8eb08cd7211d04bb8" name="postgresql-devel" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="0f6995e8b5fc94e727cf5729f73da3175c2b2a8b841536d011e0396a3919e18f" name="postgresql-devel" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="69dbf844a2eff2e55fa57f215848ffd86a7c04648eff44228039047211078811" name="postgresql-docs" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="08503df08c316ec893d430ed63951850a4022345791639b0a027d876457ce934" name="postgresql-docs" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="afddb17690ac455314bf55996c3960d7264e738d27340fcf0ec81a7ce513987d" name="postgresql-libs" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="02bb575116c9d57db93c5833c68f345450b2fca957040b52a9298908c850fe49" name="postgresql-libs" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="2927bf0ce2e04908263ddd743ff7c1962bdf4519f82e6019078364b379503858" name="postgresql-plperl" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="24455f472d9b27673ccf9dd6c645ae97bff6075be18c2f72a8267b17afe79693" name="postgresql-plperl" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="3df0501f73b009568348b4ab7a81ef44f11da3db238c3704904f1edeb80e1f41" name="postgresql-plpython" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="bf823a1fb05d2c2c7d8adee4477166734dbd567f1eba38c18bb0b4e2c98f7ca2" name="postgresql-plpython" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="1327f72e19c50450c96052253c1d0cfaa03db767ce69f72e0dc8cb8cda23f5f8" name="postgresql-pltcl" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="6f06bef9f3cb8db3c1044d5a20d0110b744fc164fa4b0af6796b9c29049c2a7d" name="postgresql-pltcl" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="bd1d00ae2d1495f0a1ef761df7db333e7e145f207aae060e907a95a5f37172e7" name="postgresql-server" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="6ff35f91fc7aec6ad30c4dcbebc4a685bd370b0b751a3f157fcbd0676fe80cab" name="postgresql-server" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="0c216dd8f6a94b4dc29c2a1ab901e52aa0ba672af5cea79e2b524ef36568bd30" name="postgresql-static" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="569ea35a929f00ca75cdf31087902462f139679d060de4c4c8c91f463d8df0d1" name="postgresql-static" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="09815a1d77f1943613010a79d878c3643d020e9aa6ded7c7c4c008c6d1f3dc94" name="postgresql-test" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="fae4e865d46fde409033623456f1a1257d133742426026548f47fb20e1341569" name="postgresql-test" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="63b27937165732d199f50d139a4c2623c9dd599af10096c9fad069b904d42b99" name="postgresql-upgrade" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="57356bda14a47c4b9bb7cdd8b60f24abeb96c4baabeefae4020db1212651965f" name="postgresql-upgrade" arch="ppc64le">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="cbc140ee15ad2bb78ad74e7c772144fb8d78414f179595bcba77d39e510ef0df" name="procmail" arch="ppc64le">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="6681b2ad675cc2f9a2d89aa53b270227a953a1a0d0807edeb8b68f30a8ed359c" name="pygobject3-devel" arch="ppc64le">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="de60fce81e791d925e250c37e106f4f4e174ceeaf3943ea97c1becc6a72953d6" name="python-dmidecode" arch="ppc64le">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="4fcb4e72c49ad46f2303277e46ea0b085209e60114c30f7432fcf28f6ebe90b7" name="python-dmidecode" arch="src">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="c1de057eecc42a93b6bc0a3d28eb58221abe8962a808c4c599a89909fefac7c1" name="python-dmidecode-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="0c7aba3ede87d32142821c02de5e2275c7cc3a10703d607c4c064647749d59ff" name="python-gobject" arch="ppc64le">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="1d5f95d31ccda389087e5ed82fcd43995032cd611bcd78716132ab5b48990f25" name="python-gobject-base" arch="ppc64le">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="49dcf4f95241274070b8b5fe8803e0158a46d04b6ba59c99244e9512ddb2c163" name="python-libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="39ad907c63b44d69c75ee8666b6f26422155bb7364f07f534cbbacf1dc1fc05b" name="python-libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="5177de8915abbf2ce80e30fb8cf5e17a5cc3ecbe69fb5bb7ddc2e13c6d932b41" name="python-libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="3a45c62cf9ea3218e832a3c1a22052f087226d4ede510e5281542dbcf29e29fb" name="python-libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="deb663653ac8ac8aeae6035ff6d8d3c464dc2b3ecea1146a4d4d93ea3342dc0c" name="python-libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="1034390692fad206c45c01b9269c0a28b487d681ee9d611dfb0b3b15ae524427" name="python-libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="4e708b89eeb326871c6350613e8d1c5f4348a9e6c0105ab061fd4d89884562ea" name="python-libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="44f3f6dd1964c1f8568761a973c7572a655e24a75be81f259b2ac5f932a8d9c6" name="python-libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="76ce58f24af1dcb070d4bc847c094b5eb979218b26c324d71c9bf2aa0df972ef" name="python-libteam" arch="ppc64le">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="075c65d9b0fcb575ea33f6d3f4d194e14b8df586b84138213f3cf65743ab2633" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="be9ef608c23aea8a15e986becc542ddb7f42253be40baddea9920ba4d2817988" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="9b25e929c98589328a7daf26988de411c1450b13d5a79190c418802bc2ea9d74" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="9297890469c52f2f5ac3f77de7ebdb6615f98cb9dcfbb80094893385a60a438f" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="61dc8cdbfae9e0c7711ba3ea1a5eee05d539c87be27e44736a911543b669aa2b" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="875796e83c1adc687a2a526f1e35f408a45d08886d115732daa9a7837f024fe4" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="4bec4d29c842199c2a2fc28b8ce2e9286704370fd72a38fd4ee110d9a85c5b02" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="a964bc51f2a7478a084811a0c96ee7e4d62bbbebee6f47ad8aa91bdc81828912" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="36d00681c7d50734e0aa2abf62b53cf7d1858b9ada20c42cd2289de74e6444e9" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="22cca25a0cbfd80a9a6a474495ca648b7bab469880b05c762bf2f41fb43bf4d4" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="2d0ff14290bf532af6b8139e75c51c143e11c3554f3191b6f27872f4ca5b3b5e" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="82397e796c6f3634e1710576fba7242d833a7e44cb8f4f19eb3ba3ec7d6ba1d7" name="python-rhsm" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="7318a8718ea9ac3dc4c846be9afcd70ff731edede3491b4f234eee2c5bb31705" name="python-rhsm-certificates" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="1e55e1922ea839314bb7a14f0d84fa2080ef72db87380445ab40acf4427d96b4" name="python-sss" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4e9eed2da821c7b05b82bf7085f7ac8242f32a18e09778bbec42e7889a8d9fe2" name="python-sss" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="aef0f33d3857da0abc16e590c6bb14c97786e0df85b64ad53537d879cab23ca8" name="python-sss" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="7e18f840d51e1721666cdf8e8945914ade86d9e668c067578f3614bffee861f3" name="python-sss" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="25b31f2990af0b714469d213632fadb4d205d45bde5cb1881aa0a12b943ca761" name="python-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="2560b5360b2dafe498dbaf6cef02b44f3aff9627983cbbc24d9d17075d80f644" name="python-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="1968fbeddc5d55191279165bfa39b72904674fc841897a39f222c9bb5dfab920" name="python-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="42f4b5437af7bac618e74d5d63d31105dc6ab7338cef101f7eceaa8a8d2c7787" name="python-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="5a44631dbd1e43abedd169a1aacd26827b11d28b4e5f88ed7afb3fce9530e716" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="9a63dab97eaf72e1a0968bdc3cdb4521e629e9f01b47335f2a2683652c08cd9c" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="b7eb09a52269417ac11f196e3a00c69d5dfef6f4f155ea7d5a9f90ca1978613e" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="25d918ad11a672aa9059d7bfe46e615e6b4742d88324b91f22cd6974696faa77" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="045ae6c9247144b6de9ae29bdca75f99f1a1589e69098d31aa06fe10457d75d9" name="python-tevent" arch="ppc64le">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="72d1c2775a2adf24b6d49db993b58dce5ecfd351b6febbdb5f967b6cc04c33a0" name="python2-cryptography" arch="ppc64le">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="23bfaa2a16d0eaff24c289caac4b11d8aa573b76866b86b89c76fb9d92f3100d" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="12aff4ecf4fcccdac8271a36f830f64922704cc5775440d52c5a30f6cb7143e8" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="7ff17353bd04f969d448a74ab41d3f273ac5a4efb2e88894029e826b8cb1aa66" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="aa30cced7435926ba1305d64b139b73c626a4f07b4d914982e4fe6bae396ce74" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="c73a390841d3e3b2e6e5fb64fc07a77a2d0fad82dd7eadf689d427c86e549c11" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="e18a96144147a0305b75d3e290a285fbcf9bf9a4e4f85d28264f19268c6781c8" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="54dc7c6840cc438faa8abe5838fe22207d31c51a7aa51c2acfc58100a3e94bcc" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="724ed50c87f54861fb411c89c4d436b577d0c56da380213a166ae8b58969e8fc" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="fdcc3b6ae84b06cb97c52bf5df61b7cb7804c289efa54a3f7ad725dc35225964" name="qemu-img" arch="ppc64le">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="7985db7aaeac71c61643700e21585bccab2a39e33514bd7a75cf88a20cb13978" name="qemu-img" arch="ppc64le">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="d2677868e83d4ffa432fb3916ca0d02de7412f09684b820a91e8c3c642cad63a" name="qemu-img" arch="ppc64le">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="b053c20fda97638c9c387b7cc489b3a7e90e89ef5b68b3c6253b691edbc3f2de" name="qemu-img" arch="ppc64le">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="6d0c8685987b6e7b085eca2acf87d53bb64e348941cd1bb506214c1432edf95f" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="e1b751861f5abbccb61432d15f6a30d9ba26729005b73f7dabaebabfcc4cbe85" name="qemu-kvm-debuginfo" arch="ppc64le">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="787f9e001d95f76da55efc09ecbcc571d5c633fe6a5137985eb013169674a324" name="qt" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="dbc3e2ce9ef150757f958299b392d6947654a284b288d7fb3de6044db91660b3" name="qt-assistant" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="f38ddcda31c720ef28b992ace7ac6fe4c6e7634594696a326ac14bd104e8fba3" name="qt-config" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="1bcd7c224f9cf2fc7746308fa8a1846cc0dfd516ff65bb21caf23ee79bf2e1f8" name="qt-demos" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="458bab20868481206ab421524ae6699bbff184d791a3797e9815ae6cdd357c4d" name="qt-devel" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="931fccb38e6b37e09d52a434365b7d0d805b1c07922791aa9a86f09848e721d7" name="qt-devel-private" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="0251a559f4274e8708b18e64d96a2efa6c03890f63145a63ef1cf6037ab984ad" name="qt-doc" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="6380e9187c4292b54a8b43d3d811e3403e82a9139ccacfca8098922d58fb70fd" name="qt-examples" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="9d907270cb509b3e26ca072b3699d295fbf61121b70df59fd2961db3dcfe5d3a" name="qt-mysql" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="3efa9049dc2247a139dd4215a5cde4d1ad05807f2f7e841163b884d318464821" name="qt-odbc" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="ce01e0971c846f158ac26901f1ceaf1206ce2cf97d214915da61d84acd950975" name="qt-postgresql" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="fb338c8486970fd6af1a6155aff3ae44f4c8307682c3af346b9c54db383b2d34" name="qt-qdbusviewer" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="b125efaede879ea914bab6d9a8eac1cff7e78b49ccbe1d5f66c336d84e17d698" name="qt-qvfb" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="79f4cd21adfc24eff540786fe098e4a743c70c470db91153388cf84f31f56b2c" name="qt-x11" arch="ppc64le">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="a32ad9cc5e6b4c4e39f5f846a22c73b74a80fcb27922553c166c540e2f5bc7b1" name="quagga" arch="ppc64le">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="af6b8e44b633bc13b978c13192eb702070ea0b9999369475af1c52d19184cd30" name="quagga" arch="src">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="9ecd3393e0c03dba3f1f1007f29af901436b0b4b7ea2eee9fecc345d3b44739c" name="quagga-contrib" arch="ppc64le">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="839941ba3671ddbbd15bc8d8b5137131198f2a1587e31796ffa7414eec194818" name="quagga-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="b8baa0178c9a3873c6fab72accd4be411967adf63e01d8799b4a69ac5558488b" name="quagga-devel" arch="ppc64le">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="3ac8163a526dad1cd752dd1e7abcb68375c9b1140f384cb78eab136d33f8c0ac" name="rear" arch="ppc64le">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="08abb45f6c34d222bdeccb195291bc07ac1d4651586a18b73b0e2ea3dbb58652" name="rear" arch="ppc64le">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="225348a43884ad748a03108e96d53608fcdba0a259ea824409caf863eb922bd2" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="2d585e93ad6e2b948cb1ed8ee244bd552f84d5b89c1042c2812efc26621c2f33" name="rear" arch="ppc64le">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="619d320d656c3b3b6ec03a60b7414027a693d8703ae1e494f351191e56f26cc3" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="a4d58e2a41be3881355240f123be619eaa3ed8a411ec1ea267c411b2f20c5efc" name="rear-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="02a232f7aae139f249e943943a383bc2bee9034d7f4cc7ceca5b0cafea8fad9a" name="rear-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="51c18c30dd14458df1fc87a316852bf60b8c9f842d6efb7ee339144bf8416f3d" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="469f49dd4ad954341c788f317a1d2258636409522152e3fde8cb7e2685cac324" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="9bde23f4fe23c9933c9f4f3e2ce90e540ea6a878bee57f101e8c880ce6dcb845" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="a1922cb73070956e232ec47d39ec04cffd4e0bb584bd3951c97bb00ab5df7862" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="6ba0000064f699c362a1de80e9ef3f59fc1a6a8114335e3f17459db661741df9" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="9fad98542afc7d751be6d784a7c57bf3ca0da85f89f696550307bbbee9596cb0" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="1215c24a286d0664d91a79a46aceca7f1311a73298afc6e5ca317f69c6decfe9" name="resource-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="798366a045148ee55a04f12bbf3710fed05396d55f2fe09a34eb5285799b13c2" name="resource-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="dfd3ff9cb45b0cab64301b6ebb17874aa64c16982a5c65bddacc86d8722b7f3d" name="resource-agents-sap" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="9a1280b136f9b0d4d9949616329c07612af5a25c0b8c640476b8650c72dd603a" name="resource-agents-sap" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="f7bd48284c425bc3aeb6b5ba23d3dbacc863d3401b806aa90174b952e9681777" name="resource-agents-sap-hana" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="7ac9e9cc55b11375553e129228c9c947cafc720791cf572d848c4b2a84ecefd0" name="resource-agents-sap-hana" arch="ppc64le">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="a8ea5d8b502f0def3f1a2309946b58e87e60f3c8890560c5b4a7cb9cde19a480" name="rhnsd" arch="ppc64le">
  <version epoch="0" ver="5.0.13" rel="7.1.el7_4"/>
  <changelog author="Jan Pazdziora 5.0.8-1" date="1354276800">- Revert "876328 - updating rhel client tools translations"</changelog>
  <changelog author="Milan Zazrivec &lt;mzazrivec@redhat.com&gt; 5.0.9-1" date="1360929600">- Update .po and .pot files for rhnsd.
- New translations from Transifex for rhnsd.
- Download translations from Transifex for rhnsd.</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
</package>
<package pkgid="6b70411b346bfa224d8a6014d8cb3fde899a0ec795d60b1e71012e478f4b9aca" name="rhnsd" arch="ppc64le">
  <version epoch="0" ver="5.0.13" rel="7.3.el7_4"/>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.2" date="1509451200">- Resolves: #1506911 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.3" date="1509451201">- Resolves: #1506910 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)</changelog>
</package>
<package pkgid="ea6139e08afb2f2ee76b77977b9e31a786e7a352cf997e9dfca7131c5ab6fb23" name="ruby" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="d36e643820182ec46a0ba9ffded8fba8f9e5ee1b5b208832a677be8d9b7633f8" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="7dc7fc52db0f3e533ee99f97a44e52b1555dffe3682eda5c4001e801e6353e2f" name="ruby" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="cef6bbd9e9630abfff0c650c3d5500c561e900a8c494fcbbea116de2c5214678" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="6a0d7715514f03552002bed88adb5832bb8a4f36a972ec134cfad71b6c2e5f04" name="ruby-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="d0edd16fda6a74574e25d2a1ca3e8b4a2cac3327cb83bcf3db54e4beca643890" name="ruby-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="6f3da25e87c2190b206fa1b4cc2b167040eed34e3c011df4109850c825bfdc36" name="ruby-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="665f5bb9cd366eaa4a2dbba9c7ac89273d7df2346b0c746905bbbd74047b1bc8" name="ruby-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="2d95b9c7ff38a23d15761c79a8c2b5e59e4188f746030add5b13614929de73c4" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="113c73ee7c03fd617ff3afadc4cd660e6fd897b13546c0bcb6fb31c1d230d10a" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="10b2d6d55886bfab8a43bae26c57b0fe3b7a4b9fd0867f5da5e472f4a16bbb45" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="acf1118cf3dff4992d4f2a9529598804f55834bc3bbd996f715ec851bd577139" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="613f356f96195ef20ddfb5882c97a77c932aaeeb52702daf0b3c7db25c7acb3e" name="ruby-libs" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="68e5f74e133af6e530dc775b9e1f6652b686d97af1e585cb6353116536b44791" name="ruby-libs" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="71e011b035e97a2ac5c5afc8318e266c220a0dc55cfea739ef20ccba7e578c51" name="ruby-tcltk" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="4ad327224409f2794a307a7c5c5b93345527ae291e2d0b3260b67793895a6cb6" name="ruby-tcltk" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="39c978c863cd7679c5d3114572a4740ba16a257be47e2935825c6c81b3511322" name="rubygem-bigdecimal" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="abc14f2d5e6825e9bf0f3357ecfa9893bce00b884a3909383bbf2cd4ceb8b358" name="rubygem-bigdecimal" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="41ce71f43080980f7e907f2cc07e4d10e982aae476d2e466b77877f3ac31340f" name="rubygem-io-console" arch="ppc64le">
  <version epoch="0" ver="0.4.2" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="a4c6be913129968f4b7e1034fa6d3efd6120cdd0a6a603530cc5b675f165465b" name="rubygem-io-console" arch="ppc64le">
  <version epoch="0" ver="0.4.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="d12fdfd12293fb9851d49e37d366743452126085e93d816af7adffb81349eabc" name="rubygem-json" arch="ppc64le">
  <version epoch="0" ver="1.7.7" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="a8e66a59e32185d850d8269daef3a0529c2a518dcf265ec59ddc19012669fd73" name="rubygem-json" arch="ppc64le">
  <version epoch="0" ver="1.7.7" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="ab6f09ecdd71227da9b85974fd4942e1b55dbc02ab6f146c48245e6fc5de8a88" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="a49045d8216249e9f2298802b9e7a757720df6cc1d1f95ff8a9c9d3fe64a1d02" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="d21b01daecb51e1bf2b9a773c85e8afa5fff8053f208f0251280f71b56971f09" name="rubygem-psych" arch="ppc64le">
  <version epoch="0" ver="2.0.0" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="f3051708d31a0bad03cdc37479b68dd714449acea75dd3f2fab90131c182d5d3" name="rubygem-psych" arch="ppc64le">
  <version epoch="0" ver="2.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="2590a112d48c9e3e695b23eea22458c47309a77f56c1bd98b9d2806365b7a698" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="2841929d852d081db101dcf030e7e188a43c568dd7d86e3d4a636c8dacab0190" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="f773280143c645eaf9c356fbbf86b64ee57c43f2e3886ed4e81b7cbf0a8c6bae" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="210827e72b6bddb489b8bb575534a3393ff424e81ad960028c088a0532679663" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="024e0dae13fdc7cc842a4983abf82fb16029bffa65462da56675ed2f49e6caea" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="a9a1363cfa096919b4de02d66c451718c04951b1b51d65db532e08d2f238f2e0" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="57a2a347e5de98317f61ebc84ce9afb1ee99b27d16c64fa2aed6dda0fa338535" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.e7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="f998bc9b0e5d3fe362e29f62115385d064ab505f9251acbc48c9f93e8edab95e" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="1146139f86656012d3011063818fea71e993051f2c80db5862b94370712e705e" name="samba" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="214c4919be34544209b9178e0e6128dca4d81f4db91f470fa147ca827e4d4742" name="samba" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="27d754bcd0a81f6a2f131f5f7d3bd87bdf9f1039698de33db0689ae873c2155e" name="samba" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="72907776da602253d50bd05b03244969ca3d3d582634be50f4af4389e6b42ffb" name="samba-client" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="eec7b9747cfe95b2eaa62371ec61d6752f1db9a9165f8ea8d9a78ea8b59c9451" name="samba-client" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="bd1a1fd45b25f9fb9ca12102adbfafddd9113758dafd768e95923f1938c5ce15" name="samba-client" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="1b87fce6d5974432cf99b7c09265713bd6d16b6b0e50ee9bfe9b4c32c97cd42a" name="samba-client-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="00dcafe47f7c59a3fe0b6e33d34a7aaa7f664d8a2ed979a2c0cbf2bb6565f6ae" name="samba-client-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="41166e0c154211a8d142bbe173f7c60c6a250512f608c16c0fb27b424a39d3a9" name="samba-client-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="6bba1414efeb609a9f443a317a8f7f5ca259e31d2b122128c34ccb4c0594fdf3" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="c4422f65f1fe3716b765170afa36e4250fc3637421a3bfa3fb4c5a32b5727873" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="d2949e2277bcc66de9ace7eef686983256e089635b3700c2d2946a8d0de08f33" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="f54e76b60d900c78bd7b38aaa17c0cf1573136e030489e8df1a473477d1e49ef" name="samba-common-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="a35914fcaef7d5451094d3b8862f6c43890046af688a158c292ec4a1e3966741" name="samba-common-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="606c8b57e95383c4bcee11beccf243929d098ee58312a7d3664e602ee130ab91" name="samba-common-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="5626057b8c16289bd068afa9dad8d59fe37186e93fc62c679d670ae8a233a698" name="samba-common-tools" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="636a85fa635aa52c3491b3f459ad0e85d09491365f89af50f511d53baf141a1c" name="samba-common-tools" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="6bf542f2709c008d639b3d08fe6e0d5d9a71a2c1e721203c9fc366002c7bee03" name="samba-common-tools" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="e9d7fc7e381d1b156d2b48abedb24c1e30f6e38db19a0f66ead5e490a2dea54c" name="samba-dc" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="0370d4ebd3495cd8c3d823b850be293e0564428592da7c3518be08033b82f3e6" name="samba-dc" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="cb8d86ff7446f372a980c249b932f0fd842a93351b04f37e264291cf4076efc0" name="samba-dc" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3dfa01b2eca3b7a296273e01abe8322d4c806d23e8c1c34e50ccccb17dfbcbf8" name="samba-dc-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="3d149179c87d48b452e4d4366db8dcfacba41eb6266bb9211986ce042dd1e765" name="samba-dc-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="26befa9ae4d091ae9b32b97a84b7c7f26bbe2c054efd6c6c27435328397da55b" name="samba-dc-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="5bf0c3d323f3baab3ff3c54eb2177c3db0a23f212d6c268e191c95061cf7eae4" name="samba-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="75d162e2e44496ff7413188e820c33b7567826b7f6d6ebc6c2d5b698d98ef1b3" name="samba-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="f20a2e6cca425633b96b4979e20a60946dfd5653c909fdc1f224115666f32c59" name="samba-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="9a9a3caea8855e962af0636ac8080ba48c0fcf5ae2bf9e932121920e5023eeb5" name="samba-krb5-printing" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="85eb17c183aa4f19f3242e49aabad614b801388c6529eafbbb866eab25b64cda" name="samba-krb5-printing" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="b196d364eb9c42a452091404733adecc57b592f133d0acc70189a7456939ee93" name="samba-krb5-printing" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="07d16b2e679e3dae5b2b856d0ee5ba20a7515462be447f2f615cb62fcf7be8e1" name="samba-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="4ba112db2b4c2c4f2ea1f33e5c468dc8b78d3d42618eb034fb450bf9b9d722eb" name="samba-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="235e234d2dc70cebeaa8fa12d71d8d9cf74b6e159dca3eefbfdcb7903bf955d2" name="samba-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="36c4b98a5427005ffbd77b2768373c6845333c4861bb6da08e8bd338d7fb6ed5" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="7ce137a14fb0b3bd7063a71630590dede4134c7e9197a4aa6e7f01af09f33bfb" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="b74f2cd7aa37017cc161662e2c564fe8d62a54db21acda1acf3cd176c208903e" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="4b6f18616f321745e8a52d508d8221874d58d6a201c334cc0ca90d440869b77e" name="samba-python" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ff2dca87c26ae0b5730a52ee8beb7700f355df765ef92feccd869ee02439f127" name="samba-python" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="01b23097143e8ec9b9db622d9d01c6f45f7e56fcfd5d9718410edb2b37792b4a" name="samba-python" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="69a1901ac06c4fe4512da40311e43f1b935cb96a0916e2455a8bdba70716f4eb" name="samba-test" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ea27afea65f8e1cec4eccf7891c3e49fe2a80189330b2aca91111f3e0c5bf7e1" name="samba-test" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="43c0115d3db7fc128ff06f737d846f8e097c76942e949b84ded47316b92f2ce8" name="samba-test" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="b58e1c506316ad6164428339524618c5392bccffd3f69341f42f0a872e72f4be" name="samba-test-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="e1f94ad89148ed05427a3caf9ebc9332f1c9982002fc215b49620e95ef916150" name="samba-test-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="ba41d8ce34ed8b9e5a8a94981c22c56351a2a4ba5a281f5abdafec7286861ceb" name="samba-test-libs" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="031d22e2ca23e76d5dc518447baf6dc2de14f685df50c66fa255d998344bf1da" name="samba-winbind" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="2e13f28c62fe16e9115d2dec9f0ffaa651488535c6d56ff507fc74805546e61a" name="samba-winbind" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="90257fd66b88fcbaac7046cb1d429024ca612d5f61f4f3f49638edd1aec9cbde" name="samba-winbind" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="1e1439bcdb1609f53e08c7756aa057b884292a26089a87184dd403a0a34838a9" name="samba-winbind-clients" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ff8c99d887379bffe46cdc8decf373920a3f5ca12a6d84ccd360510352da6010" name="samba-winbind-clients" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="dc51641b2736a2d932232214f139c62adc6b56ebaa82d6e44874d3c43c8dd27e" name="samba-winbind-clients" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="ca30de73eb9188b43fed95a60d64a566c8d6150a29f130246d256ee94d486d62" name="samba-winbind-krb5-locator" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="8d8c20b51c17ffb1799086df5d574e7b53841b4424cbb094d894d48ca739d788" name="samba-winbind-krb5-locator" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="e64ece5d0c66790c4bf510801d76d0034b20c4521868cdc89236a4a64d43ad27" name="samba-winbind-krb5-locator" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="aeb7b4b8611fc1db85ba3865ba0bc5c01e666c2bf78d3bd6df912ead932058ed" name="samba-winbind-modules" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b21c2f87c7f71c37d818856adb6eb5fd050434c7f0d80d9c325d03f7d2aed701" name="samba-winbind-modules" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="98c8a27cee8097f3e24d54089bff795b1085c0908ad088adb989d68435526320" name="samba-winbind-modules" arch="ppc64le">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="1560218853da6cf0b3fa787a5663e013e16011aaf4cf737bf134678bc2b89440" name="sblim-gather" arch="ppc64le">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="02e30fae333493c5600a97279dcbf8ab4fdd784462cfd894465bfde284aa1401" name="sblim-gather-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="2ac71e0d764ca13bc94a8f0979c98f62dee6eaf20b6012f5cc8a96b757d95a85" name="sblim-gather-provider" arch="ppc64le">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="d2b51233368217907f139bce040585740f2187915fefb4c7a02608416395446f" name="sblim-gather-test" arch="ppc64le">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="47e827de6c28edb1bf5538e0fa7b2eb106b3af06cb6c0f68871ccbe057572eb7" name="scap-security-guide" arch="noarch">
  <version epoch="0" ver="0.1.33" rel="6.el7.centos"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-5" date="1487073600">- Fix template remediation function used by SSHD remediation
- Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-6" date="1489147200">- Ship separate OCIL definitions for Red Hat Enterprise Linux 7 (RHBZ#1428144)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.32-1" date="1490702400">- Update to upstream version 0.1.32
- New CMake build system
- Improved NIST 800-171 profile
- Initial RHVH profile
- New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
- Template clean up in lots of remediations</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-1" date="1493640000">- Update to upstream version 0.1.33
- DISA RHEL7 STIG profile alignment improved
- Introduction of remediation roles
- RPM and DEB test packages are built by CMake with CPack
- Lots of remediation fixes</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-2" date="1495195200">- Fix emtpy ospp-rhel7 table
- Fix Anaconda remediation templates (RHBZ#1450731)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-3" date="1495195201">- Fix malformed title of profile nist-800-171-cui</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-4" date="1495195202">- Fix specfile to not include tables twice</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-5" date="1497441600">- Fix Anaconda Smartcard auth remediation (RHBZ#1461330)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-6" date="1505822400">- Dropped remediation that makes system not accessible by SSH (RHBZ#1478414)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.1.33-6" date="1508414400">- Manual CentOS debranding</changelog>
</package>
<package pkgid="00e2849864c256f9c96deb247139b8ae30c93ca4d58e329aee402130e8e6d7d4" name="scap-security-guide-doc" arch="noarch">
  <version epoch="0" ver="0.1.33" rel="6.el7.centos"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-5" date="1487073600">- Fix template remediation function used by SSHD remediation
- Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-6" date="1489147200">- Ship separate OCIL definitions for Red Hat Enterprise Linux 7 (RHBZ#1428144)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.32-1" date="1490702400">- Update to upstream version 0.1.32
- New CMake build system
- Improved NIST 800-171 profile
- Initial RHVH profile
- New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
- Template clean up in lots of remediations</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-1" date="1493640000">- Update to upstream version 0.1.33
- DISA RHEL7 STIG profile alignment improved
- Introduction of remediation roles
- RPM and DEB test packages are built by CMake with CPack
- Lots of remediation fixes</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-2" date="1495195200">- Fix emtpy ospp-rhel7 table
- Fix Anaconda remediation templates (RHBZ#1450731)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-3" date="1495195201">- Fix malformed title of profile nist-800-171-cui</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-4" date="1495195202">- Fix specfile to not include tables twice</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-5" date="1497441600">- Fix Anaconda Smartcard auth remediation (RHBZ#1461330)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-6" date="1505822400">- Dropped remediation that makes system not accessible by SSH (RHBZ#1478414)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.1.33-6" date="1508414400">- Manual CentOS debranding</changelog>
</package>
<package pkgid="46f7c9421c83684b550c18814cf16e7763be10b9d927e3fabd5641f26b107bd4" name="scl-utils" arch="ppc64le">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="aedde511a809af0ca8c7f7a86c9b0141bac93fab4065b8149bf3f718307e4f6d" name="scl-utils-build" arch="ppc64le">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="58cc9a18410810c90d54cd9cc9a5d7f1cbb40fef58ebb2da2ac5e516ee88477c" name="seabios-bin" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="b7f1ab34f757c8e12ad1996398ddf68ec93f3c650318693791e7ec28dbce88a2" name="seavgabios-bin" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="d1c3cfa887b534402228412b02dba7f92b31702a254680c39b6c72ef9d582a59" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="42b8c293cc72f1c0331f97fe0f4dd02368850f76df87b90e1f95e4156ed337e7" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="cb59732fb41872863d49cde0a90a068404ebbe007048a3fece337a80ff642512" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="171dff94d0e2468223a42d60a0625dec5e04e296e1708685a9ac36c7c61a1421" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="938ba13612e36d4d96dcff4fc5cfa38e71bbd7a588ba2749c7f278fc5e15ae44" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="409746fdd37bec4516d67e78da70990c9ce172ee7d13a7167c85c7f7284efb56" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="2fdd048b34fe5c32a8d158e3409001fe7b527e9e84da661074948150fdff83de" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="1f6d2d062deffba062af94e9864fb8015a2e6af7be58bc987816c436c609f44d" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="9752a134a4e3a9c4b56f820091c66b7d8684b378ce68cd9e8495795ead53de4c" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="6e6881e238715158c346ecb998b43005144679c6a05dc03ad52259dc81c326dc" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="8a66af9b7715895bce862c7483107273084d07009e8787dd3a70476a86461e5f" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="e403601b171654fc288f746ca943003438a29ddb3f75ebf01fccde00e534aa31" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="ce636eb17f2b2d589fa831009f18316e244c531ee7688a50b7fbfb973ac83751" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="91ab00b3c1c05a7b579dbdcfb9d6d286d7c5c8b0fc594daca9e2ddbaf8270470" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="19f8643e1922ef7af69d1007c414805214cf2aaf1d6867e1917f39177bafefe4" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="d1ef4e1d3e2a0905324027fedd961406c17828700b669da09e6362ba63096e2c" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="10170985d165d86e04708462cb2d591b4eccd3cda7584bf9abde7fffb6390b7e" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="edf57b8ae5aba073fde5fd97609f136a956c15ed579beadeb9eb320ae8bc4b3e" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="201b55e97a28d8bbd7f914091a2748836d466e6f7639e9fb51d1074022ee4a1b" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="30741565e798431fed1b2a5255690b60682c95b1653258bb4f003662e63502a0" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="9ecda47357df35551c076bc94ec05bace91cba0b1728375b5286d70ba106c856" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="b1ffb196b6cdb7e5227d3dce0aa00117f0afaf9f1435e95ca42dd629cc4399bd" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="7f26f300ff09308a4f2ae42483bffaa85dbdf5b4bc184b12ca51354c978a24c8" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="a6de6128b9f1251179e79802fe79824bb4263a3190974fd08264a21e84f04434" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="64b57633aa87c0e2a130e78c0b7613cb57b3ba06c910cb5c36be2625103a809c" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="c7ab27380121e2239c245494e1a6969e5e47db6aba7ad809e4d09b255af13c5b" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="c3e39afbfa1cf3fa107065a4ba2974f558834404342fc2afc2e59bb8a5cdc4df" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="29196e4fe16893942b451ef5ecf01cb92d3673a35101122853ee12f0e87bd045" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="fcbbdc7916c08e53b22d499e8520a03a9bb76e815defaebd8d8fc74f8459c130" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="b0b27ea6aa98c933f65e79166af26c5074be0c1abe029504f912f68f660f46ac" name="sos" arch="noarch">
  <version epoch="0" ver="3.4" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-8" date="1507809600">- [gnocchi] Tripleo specific containerized services logs
  Resolves: bz1463635</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-9" date="1510747200">- [openstack_*] further updates to OSP plugins in containers
  Resolves: bz1511087</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-10" date="1511179200">- [postgresql] Collect data for postgreSQL from RHSCL
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-11" date="1512734400">- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-12" date="1515067200">- [openstack_cinder] check for api service running
  Resolves: bz1511087
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-13" date="1515067201">- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4-13.el7.centos" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0d324efa875bc3cee7badb4034e887aa5bb207429dabba131d5c5efe668355c7" name="sos" arch="src">
  <version epoch="0" ver="3.4" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-8" date="1507809600">- [gnocchi] Tripleo specific containerized services logs
  Resolves: bz1463635</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-9" date="1510747200">- [openstack_*] further updates to OSP plugins in containers
  Resolves: bz1511087</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-10" date="1511179200">- [postgresql] Collect data for postgreSQL from RHSCL
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-11" date="1512734400">- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-12" date="1515067200">- [openstack_cinder] check for api service running
  Resolves: bz1511087
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-13" date="1515067201">- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4-13.el7.centos" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f3967b4ff853f0ddbbd537e87823a2b4d06f2d2914919a5985daf9bce84e469b" name="spice-glib" arch="ppc64le">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="789f4bd7c52ace0c44ef149811da4374b0627d3f3b50a1f4736324d848f7c780" name="spice-glib-devel" arch="ppc64le">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="fa8847f387648920643d4cfea4cbd1fd6c83af3e3e67f1175e923170f7588ab3" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="63683546538bc518b9ed9f8a5720920c4de99f40a2e7c908852e783b283ba2c0" name="spice-gtk-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="6a00f7168b148826a741bc9b197f85830da0b6246bc7649866962b3a2a8e8743" name="spice-gtk-tools" arch="ppc64le">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="031c602e1e893b97485ab9b68a0a96660e265b97492cad3946c52b639ce74c5f" name="spice-gtk3" arch="ppc64le">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="e7597c3475fd0abc4398a2fdfc235c547404c609474705a7fea5f2e3777a6abc" name="spice-gtk3-devel" arch="ppc64le">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="c9340d05a9cde9be2a8be84757002582e3907b9cd34255baaee926fc284ee776" name="spice-gtk3-vala" arch="ppc64le">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="2cee4bae745809910987077f8797c207cc33662d3e569a3eee92935720c66c9b" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="5d0207b7080c9f113e93e8b594191143ba0841d1e3d7eaadde52782765ef5f75" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6a8f808922bceadca1cc80ea89441deaeaedb1a33986e811b492bc70e4f54e92" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f37be225ae3188c28cd68d09d413f595c25cf40fa66853dd1510d4fbcd6eae73" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="52257dc55a041b656769d2a00b96bb1b017cf83a8ba2a37588c4b4a0d5a52b1c" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="e3dd93f256adddab86f8c2210b031cbfe8a3e1dd230f3fb30cc58d6f5ac91cf4" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="1955a6d65f9c9fb731e6b65e390e4296dd2d3923644256f059ab20649b2a7b2d" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="25a2572c204f0513fb0f89f8d74180200ae5fae43a8885ec0134beb79d2de3a6" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="19471dac7c82e6d84f7281f317b646ba8a7c3817f961a4c9155420952e5be824" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="21b3a22d09bcddc4a6cb3248dc287487bb0d5a73fdce4edb1ea6436731c090f9" name="sssd-client" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="d849e4a136da53c0b361d791c7111005900773347bd44e4cc27dd5c2b0a33380" name="sssd-client" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d285e95bee9b8ee6e93334446987454367282d480787262a0082c01b3b47e9ec" name="sssd-client" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="41f70897b318ba477d64092669d1ca1cd54a4f8d685a835006875c1d7dd64ba1" name="sssd-client" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="e3e487a8edba25d5e6cf647d9aee3ab549034538fe8931de9316ca32144421d1" name="sssd-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="d2e451eb55628394db8b55b91a62a282507bc6b42304ffcd8efeb152bffeeeee" name="sssd-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d1c2529e856283604413da47ec2fa3c87964b3251d6fce8b07a626fe09318bd9" name="sssd-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="5e3548e1ceb1b9e749428138be5a91d6c66840958f02e1efbf7716f590ffb141" name="sssd-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="5f2bb2b8cb8273909ce8a48701c1764d72d828b9d46e8640bae13c3617291193" name="sssd-common-pac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="7a7963e03a3e6dcdb82608bda0402e1630301981d73b2b098b934f9bedacb49c" name="sssd-common-pac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a1d4ebdcf9c938c93c6d3ef8f9a071a77b873f1ddcf1ff56d25e203557e76a52" name="sssd-common-pac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="2c077719bc70382d6e50d7a7ff5ef4056fc325ee7817a65a33fbabfffc98069d" name="sssd-common-pac" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2c65c0be3004541ac0baf8059505aa97295ae0c3957f1800c74650d3f73c55a7" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b1da43f16ed44fc9e6cdb85f382a50821b271eccfa64ad288b2cf83817b5e01c" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d9c7e34f4cccb564f4f4ea6af0aff68bb42b06164ec1659630d4d89b8b7122d9" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="5632f2bd3e1f1607c363a0000683b8ee30430e671f72859a597cb9daf3a97f4f" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ddb1f336413fb1fdd96da7ee376afb6bc557adb72ed3656c1cdf94903a4a7083" name="sssd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4a1170602609216612002eedd1d9e7818b7d6bc9b497f07974e5c8fd9dc4fd1a" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="761264583ee38add44dc157a1ef689a85cab3ed0934bccd37ff521de01ee65c7" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="ec9531d86668e9f130e59221801dd5b3a0fb51dc1550bdc58f9dd333e7441e24" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="98490e612ff25ef06e2e08f6321ad9c962faae2ead1c12d35c23e3fcc2ac5fb6" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="c9e979e1d0860ee3249d70fcc2dbb445842718276f50095faf2121668d9d0e90" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a2e87d9a34f31d0170f80567a7e7db13eba4f8b2557e690f784ffdd8ab1c6107" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="13d3d89cd25c60c505532348702742d8bb3fdd505ab6133d8b448fb229459442" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c6b22cff58e66f311fe000ff106e2a3836386685914a47592b26211f325d27ae" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ec62ecd62b39a23f9f70644882b50b438ccc7b30257c9be8d272821a703f3da0" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="cfc335eb44ca5ebd9bc80208a24413d8435b79950aa9926878f11d2a10fbbe90" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="8550465af5bbd913c4d40c2e2acb65758341e66f4ab4e337a212743d36f716b2" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="4598bdce5bf734fe3e8499832eaa8596b7ff7b087f4a45de213e174e51ff293c" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="81f71ca2ea37a11cb8b1935dfac3caa0a421b9aa29dd9d75d669f71b9b7a566a" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="dc20d5bf7819817bcf734510146eb1fa132909bfa8378c67df29892abfd7dc3e" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="ba8aac8d3eb6a4770a4a56561b8c15242125f904a68679def8b4b8925e02243b" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="7aef8445bad23a5b792ed5ba3b88ee894f855062c544be9a5fe033d05367d8f1" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="34578d91128afbd894393b9a87341018a4a703b65a897870415fa6533babce73" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="86c29a375de43957d6e2e7ef54b54951df0b9a06ae2f57b62223720a92b53016" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9e57f0f46d32b41c4b3624750277b727d24823185e9655b72eb609a2249176d0" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="de38385c55762683b4de6256d08c75fbaa38e83ec60191f80333f5a833b7defb" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="26ac0af7b18b4ef695e2df9ae8c512e5a5b92eb4b584199f860455891c76e0ad" name="sssd-libwbclient" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="618aae59bc6b439c38cf2924f6f8df2a3bcf8059a0c4d776c5d5e47b436caa67" name="sssd-libwbclient" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="1c9a79f8cc59f1a9064254d9eb8090c642e4e38ed781ae6adb72f0bf30ee89a0" name="sssd-libwbclient" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f5024883ec8b610a0bef620c5427cbd65777ad11ba7299c5dc8cfe873248307a" name="sssd-libwbclient" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="d47c54c131d53ffa3a367fcbf40feb13738f94da1e757aad8052f127da587fc0" name="sssd-libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a135acd9fd8a76e00d3ccfec8251d04ba3556f1124ed61f6c084089c8eb61694" name="sssd-libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f236282b01ae454992e797a0973e6aeabb4a3a38df1be6337977e942c275aa53" name="sssd-libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="bb7cef856fdfd6cd62d9203e071b06274664fd3bb60f76a159ab29b1f64714ea" name="sssd-libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="70e6d46b44a17c6408fd2d803f706dcdd3a617b7822dd8c407bc82bb8ef349ad" name="sssd-polkit-rules" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="3ac291b282562922f8b775a3c00e4dd860287c683896c15f31688aaf9fee06f0" name="sssd-polkit-rules" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="31c1861c496a9df6d2905d8c4324195dbaed8d29ff9d0f6edf028a5a02ec07a1" name="sssd-polkit-rules" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="1e05deff28bbbc95d56f72ac96e6520e22ab7b4b40ba3835c6ce7d62f92eb3b5" name="sssd-polkit-rules" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="be1481df4c5314ae03a5cb238c80369daa010295cd698a6a6475912a02c2f952" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="5d5f9aefd27d40e0839403f9e10a201e9a40f1ea2eda773e47d848a6071c4663" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="92affa7b4ef21c7ba14032f630ae3ba229d5fa7e729688de0884e53c18c54507" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="63786f86a3543d13a75fa1b261c86d5a86df1f7f29e2847829ca32de971b28a0" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2c1bb6167eb404addb685027ea40b5a89ab5db0d81cd1f6de288491119c46769" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="c1949e3fcd4ad9cca7853bf9c597369e24b6d40a19b3945f5012e54034503e21" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9de692dfd9af119f267d6eb0014a6820f7bf28750dce6418319d4853d3596586" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f0dd96b13ee46f45f4244a7a5b98c6fca6da29ad9b310a854fa4bdc5b992a811" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="9319aeba2548d1e9c84a080f445d53d56f0cd1c745016384e971703fc56dd104" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="126b451f335dc05dd037e895d2f7cb3bf2dbee56702b0cc30e89467e3da0caf8" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="bf8f73970f6ff9aa6d03f0ffe332af803df572304cd00421aa16852e23b902c5" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="a4f2b098819f808a8ab1ca82b824a9795155ed50614643dd30173252924380a2" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="590e3dcdbbc2fb3d41d10cb52984a6706e2c2d9c9a1f0d4435bec137eeaf3811" name="subscription-manager" arch="ppc64le">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="16422d5634d44e1609ecadb848feafa089914bd9f21ddc4641421a09b4af0cf8" name="subscription-manager-gui" arch="ppc64le">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2dab2560ef9d1fe805f1ac84afd2abab8400d38ea8e994e2e4f0e00ccaf26f94" name="subscription-manager-initial-setup-addon" arch="ppc64le">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="6b3336a906bbde4bcab03c914c3346b057647e6e2eb0e0b3dcc16cdfcce4b753" name="subscription-manager-plugin-container" arch="ppc64le">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ca6318f9aefda888d449588d0aa44ada55bf9c086a0fc2d2aa464f7977948ca8" name="subscription-manager-plugin-ostree" arch="ppc64le">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="6e695a43c068365d7bfe793b1f302e2535cc403af44a78be764c688f48833e8d" name="subversion" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="1639ae8defe746b183fa4579396fe37aa155a2b3fb2ed00f2883873ae01e28ea" name="subversion-devel" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="ff9603a26d6f8e057e05375263fe153b22f761383a75666cbb3b027c08ca256a" name="subversion-gnome" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="fa530e57823a22ae538d1e13bde697c53ff9dbee17cca1b01665435e3e9e9ce8" name="subversion-javahl" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="332169a9f9620b3f9f6423c92400b0c7dbc70d9b11a8fb2f275af28598fc9349" name="subversion-kde" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="7d582616ce7889b1784e7accfcc21a5afa602b46db0aafffa58647617bd23346" name="subversion-libs" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="0204faa529c6c465bb25816be9822dc483539012468538ef2aa48761102496cf" name="subversion-perl" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="b24e7e29ccdf283c984743d6f9a6e092af895599295de1e0b3af489ecfdd322a" name="subversion-python" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="2dd50a5727b9c1d35cb2da75c108227d66cf3a7c410290f300eaba97367932d5" name="subversion-ruby" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="cc4dc91d3c8989fe02f3fcf3e8f9b66934ee0c0497a435cf204390849b1d96c7" name="subversion-tools" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="fc448cb3895ad85bf1cef28c99e141d860b8c525a079303a7afa6b40c515f55b" name="sudo" arch="ppc64le">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="ea34f791330e6f4e277ea32ae9cff14213e9877696edad29c3e28062822b10e3" name="sudo-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="56d796771bdd42098b6e5f0a575071eae8c6deeb4145625dcb5ef533804e2996" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="447e2df51d12b5d45c2be808b2df2833a9c8f72fdca7e8a05e2b7e3fde1fb9f2" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="3f5b7591a34bd75f344ca3045d9a6fdf98c335bd6b0e2fc0ac04e90ddff59ae7" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="25dad7c154ff9eaf30e261094b4657e26bbfe4536ed0f17da27db67ae4c7cec1" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="a688e3cbc00376edbd765efe8d53f799bba772e45d8ffb68c6e4ea66e21f33a0" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="6d27865c7c0f610ea2ba252d2f2462a9e65ae8c1f8655c40513c773c51367837" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="30dde5a44ba272f10c6267118bcb96f2cf4701aaef82722b5db375358f625b0f" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="f416c49882efd15ede1bd5052593cd1c2396be41fb52f01d1d5519e9a7bc4793" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="121fc0552f0fc1085f864a1bf4f486a186c7cc24b58a4912bd61a9f4fa5c3705" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="5670558c189882c378a215011a6196bd6f1b73dad236e73d683c8fe9d5e71744" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="63b2423d8e36d47caf3d38995ad0b1b7d72953c21d37f4c5043009cb6a65d046" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="eb671141b2e7353184a70c6da780761b384272f8fc90a9944b6dd2702a71b434" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="6a3a96d4e9fffb5e58bc11f90a56c93cfc6ff5f5dec7221b8b1dc2ba6ba61fbb" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="35b88e88c80c5ee0bda8d41328fde49e27f01a98043fde6f4bb9f2527bc95e96" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="6e0b9bebec07f6e3631ea360e01623868830c82a813ad53587d5808f424104a0" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="01cf7336eff633d8997962d8f906e892a9cb9fd6fbb59bb72a2d87c88d3838dc" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="aad56d14a21fca2e0b65b1907de6af2f3a98f364702c2dd0362f49d0c7036243" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="902d55ed8be0a8d46f2dd24dc299875ba405f1b315c6840494cadc052af61d37" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="6de7ec133694ca13e14830d78c5040b5a22931f008be132999f2d8aebf7f34a9" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="e32d4747731003018f3fdfc2ec06123dffbb1f0796a1effc74acfc2dfce5ac4a" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="198d16fb166cb5995b1ade701632e4168d4cfd123f076aabff733f7943416c79" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="503eef55b049ec1c6286f84c0e91d5465e516e260ed926dfeb8a3efe53d2a3be" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="a383ac64b7119f7919d733c0abe679c4d1e06a94776fd180f01b927c80133b4e" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="c237df080a0f289b537e3bb3021b804ad73e17197002c1b73a6501bea93f97c6" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="48cb2cc9a4f06b57b3724a42b8a0203da58913570935ed7a8a44eaea6f0f1864" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="67204614133e89ba4e244fa8979b270bcb6ccab68f66ade845c0a805eeceff46" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="efa535e252b057fbaf41f453d8aa43cf14210f4c4c2b6c2fc57cf15ac85a3ab4" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="e40f7dcd7920c04fa9740fa5308c2ddbd17d624a13c73e353d46872a9428c337" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="11b6d760bb3fb33ff531d8fc3a57d73842abe6b110e01a78e24e9bc885cea5bf" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="49bb3db93e80b8928de99bebb0505995d65cf73de85ddd7e920c89c44e4eabed" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="95f4e69cec2e769031893f520173edf4db93387ca1b665f14e89653b9e1214c8" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="ea6000c1fb96483386c35919b75a1986a5b369aec7a687592e0a600ef7252d23" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="3b563c734c8ab050bca4ae6f484f142ec6058916557901714c66a4fd0f06b898" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="277eeade52a7c0ed629081fa43e3000a34ae3d84bb85f683a26d6bf622fe89e0" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="0d797f5851d92d038a231e0b5954697c6d18f0f99d8e8a5ceff4210ebbb29d16" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="e9e5c28faca879fedf2f9b5399aee5079d8e6d41c59b0dd958bb86cb64e3902a" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="9d900604fa5e8cc6b7c336c5914f993f31ae5312e00f7c894e0e5e3457e3bd04" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="d01dfc25bdc0f6b2963a23bd914499662722a707f7f5f1f94416f503af5377d7" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="fd362ee3c10b201d98773818cd1437e5c7a4f4bde4f15069a24edbf79d932824" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="d7d6f130eff97c8069ed3c0e5cb165c2a9fde641a06c5686ed7563e1e657b128" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="c8777fc6277d2668c4cd886b0d1ac27c7ca84136401ae6a649fff7bc115e8b77" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="da58ee4f9fac416884109e606bb166ee253a4a4c256e0e28cbdc4751cdb0a15a" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="d226ac195593fa38d95ffcf13386413a9dd0db2236cb7bb80f5f2a7d923552dd" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="509d6913f1457df491ec6c4ebc22b9cd9daf841608f6064d4789305179d0d0cf" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="28a5e9d17daa17dcea61c4c82fa01e1f72567d319d4510ec74f57e609645c54c" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="aabad6c86af7537332f96c60cb24a1d6dbf1943ab3f60d68f1380ad316f878b6" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="f697bd5b8e4e7275e4f7339132e479f7bd14cafed6f387e01814a8b377951e34" name="systemtap" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="32305c1108e7fa5e65476c9df1e03ab72dca527bc64bae8f58f85e9c93c8a6a6" name="systemtap" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="15b917acf881db64419c88412fe3195ea4a31fc0eae1c26a231a97473c7be941" name="systemtap" arch="src">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="0bf7ad1042c72150d8f6ecedce1488e7dd72852b458a2d5ccda12a80696e1d27" name="systemtap-client" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="3d181b005974669bb780e5ca15d4e569d670d79efb9e9680c5255549df7ac6b9" name="systemtap-client" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="9fc47c070f8358cc3bd5981036b68f702a3a3738b42859f1b702a6533b4442fc" name="systemtap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="8eab22b9c63ca8f1e6fdb038fb1858b14371d2440a5f34a31143acbf9a00e9b4" name="systemtap-devel" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="471f74697abea6c7aeba05a488d4a9ea944b4152a569031de789e6f69a55732b" name="systemtap-devel" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="bfca841024094cfbb6f311f74eb82ca6ea0824264226e3cb56d54dc034dff9a8" name="systemtap-initscript" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="f5432aa166d43118425ba9e4e857ccf675ca11249ed5997049b7a7dc690f0de0" name="systemtap-initscript" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="da5d64956a0e30819269663fff8d25e32a349e4862cbfa33da65b39b42c62724" name="systemtap-runtime" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="c48cc176dc29683125fb7685dc7a324ac2bd3bc1bb912ee6789f73e58d91f830" name="systemtap-runtime" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="a4190b7c828300011f14d948b88f4037dcdb433570e11ac7c1e9ef375dabb979" name="systemtap-runtime-java" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="d99d6fcfc2517585d79608290b334835329469073f2425a14c451c122909fad6" name="systemtap-runtime-java" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="9a59109ebf39af3c9e9aebba317ef28b7e2a502292b780969e98af93f17a4a36" name="systemtap-runtime-python2" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="5206a9a4f4923bf164f6f9441733586b5faf1cc29e87dd000cc3a7dd9c503b2f" name="systemtap-runtime-python2" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="cbfc2c4a1da2959aa050bf81b3cc540f030b05e8d50141f455af2de92941e706" name="systemtap-runtime-virtguest" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="d280c6269c87f8713db1851433cbeb33f71835dd45902f5211149ffb8235cd84" name="systemtap-runtime-virtguest" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="8daaabd71f4060f80aeb8d15babb356c70327cd9f2555aafe278160e46367834" name="systemtap-sdt-devel" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="73e8bfbcfea184e60173fe4b92f00900fd0097b1322e88d735a2938f47c227f9" name="systemtap-sdt-devel" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="6148a1d14a2d8c088d747d166d93ae3a463d67c43a1591e1845e5715d98babbe" name="systemtap-server" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="4f9f83e9bfa8b575e6429f5db396313c3ba05246f719f5a62a57595b6efa3829" name="systemtap-server" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="1e9837e631326aefbda028ecbdaf8fa5fc191ef460af271f44395fcb4697dc17" name="systemtap-testsuite" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="0a4e45895c1bf476aceb184287745569bceb267a9a5df7afef04dbd13dc430fd" name="systemtap-testsuite" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="bdf5ef9b9bc000442992458b2ce708a8327b1ed671721dfb48f8bd246d95b0ff" name="teamd" arch="ppc64le">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="53369f2b8d7fa80196a5c37ce50e01e15cba2f469d3d8ecd4a47ce6b0a9aaf51" name="teamd-devel" arch="ppc64le">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="fc7dcba4b6e071321eb255fde4a9c64fa17b6b6bf631ab3ee8de195a9c26d580" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.3.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-1" date="1503576000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d7517e7420a3c58cb0df711bcd575b23c8a747200bd529947505cdd859d8198a" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.4.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="e000edab1ab92372b246ecfbfa3d96343d3c1c767a92c2caa8d930797d4817ff" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1512388800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="37bf859b36ba6af9793f04aeeac112967d0fd759cc4a331408b9de8c0c7e0d86" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d1a8b15fa84ae295799e9af72c5006d8d473b368058eca847cc42967939895fd" name="thunderbird" arch="src">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f871b265b3a6c41c923af11a5636a492da277be521938f3b1392ded282672ea5" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="d5130f50aa4adaf314469c4a24f65bfd20e7f810e72a9395ec8586ee698716e3" name="thunderbird" arch="src">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="0ef55db75d5f6d738e8229c5d6210fd629a6679c60c042f4b499fb2576be88bf" name="thunderbird-debuginfo" arch="ppc64le">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="72d0df9654987c414930f9c12c7b527e8588a6c38cf2d7e9291801a644813dc2" name="thunderbird-debuginfo" arch="ppc64le">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="db10a6b33dbdf6859b4b59aaf7068de911185d496f48d4c48815f999a3c9d70a" name="tigervnc" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="3b5074270e43684482308d0d88b6c2ef55c45da8978de0f3bd92899600f5bed5" name="tigervnc-icons" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="9646b624d46b520a8a1d5c470930082805244d228522771dddfada7629d05728" name="tigervnc-license" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="b9a7b495429ac89428e67e893de5cf7f61b84ec4870fdc8af5f198b0d473234e" name="tigervnc-server" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="bbc570caacbea768da1f4ad4e15fb05be61a7ff96eadaa54ed5a4ff5d2fcecdb" name="tigervnc-server-applet" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="f442355c36cdefedf5b4ec8fb561dc43c940e9dc9e81f914eddd8fd4e43f93e2" name="tigervnc-server-minimal" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="cc63fb3310490c54fee573f88c63e26111117dde7e5478bd3e637c863e872eff" name="tigervnc-server-module" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="33cdc4b58750529a3709c814dbef47d3407feca6c4ac077ef3f04ca8214890b2" name="time" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="cfb33dd0014d4424ce46d6a013bd491e3f274f59731f0a92379e5b069f57057d" name="time" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="726181dc49141f21af2fe7628535b9809c410029f536a308b67a66098eb19da6" name="time" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="96b7c85bb80d9f9e7b8576b18d7253afdaef3018f4cd56ade10384dc4d42925c" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="d55073e4b8b355e1788b15855c44a994da09bb844712485e842651ceeb68ffbc" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="83ba85bec979b56ba298e51b5278f673d8bb254fd2469796c85e8774e9069183" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="c4064441c218ac9aabda0ddd907f471a0b2ee3028769b28c667c9194c4e5bfb7" name="time-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="730c8e59ce9adb7d68699866406c82d74e772a0f32e59c414ce343dc89cddedf" name="time-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="185f88774bd32e0a8aa6309a66fd17d12f23388048f6c12564a3ea38bf918910" name="time-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="1d033d848fb070ce731bfc768129169c2cd611bc11dc8653f5c58cb1bdfd05b9" name="tomcat" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="3fef90d9cd773b7c399ed6ad442d6bc6380c0c314e99d92d583c8aae5b369c70" name="tomcat-admin-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="cc9dd653559a23925e450bfb446d94d2bda2a98f22bf4109e030240fa2ad20a3" name="tomcat-docs-webapp" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="156136608e5705defebcd04383800714ac64368b390e1992099db8fe147046eb" name="tomcat-el-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="aaa1246b0c12bd623bba6542c6cedaad6a97d3e38fad4966e1f7fbbadb6908ed" name="tomcat-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="3286080d1506c088e8e68c9c41ed8fd5724465ab5b7e322ef9c8ff6d6d60df16" name="tomcat-jsp-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="f6c79a4f7d436f6f619be26db6eef983ab97add568110ad8aa23ee0ea50e7eb3" name="tomcat-jsvc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="5c867e9a48a014d635134a35b7cfa16433bf58119cca39a0194e4163dff5ed54" name="tomcat-lib" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="961dc90fbf11540be166f76a98224ca6ec920060a48bfdab9d2ef525026991f2" name="tomcat-servlet-3.0-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="6415299ddddb2dd85e5fd14ac1b183dc1a297f94db23ad0be08ea8e7d0ae53dc" name="tomcat-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="48189d791e820dbd6e33c1272d40e4e8364e467d7cbee7d23d67c15bd1a3690b" name="tuned" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="f7e2a55623b17cf63d269774eafa2c9904468e1926eb30e067befc77fec8ee99" name="tuned" arch="src">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="c73951ba49817b65458d0ae4bb1f8a7133e550c92f4bda2f7167ff61761bb95e" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="c473ada4388f500c88def929938fa58a16cc91ffb7cc71a66a1e7bb6a7a5bd4f" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="9468a988737348456685a30a0f68f44c17134b75cff8ba88d59a8605722e5349" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="4fb59dded555e0ebcd6bc0dddc911760d429dfadb057a2915ce3983bfd377f0b" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="77544185eae752ad654d7a860e7e8c7842227abbf57631f2ef3e90baedf1587e" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="a448dde7890e26279f2936e4778d3f2abf71d04253479a949904e50da2b07952" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="b4005dc83615cd11e575650e0318f7b232569a8d0c3ae0e56218b3d6169a2f31" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="93cf348ad19cd915433b3e4d66ff9c94a309487544bc9c59eab1fca4f240292e" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="caa0f2cdf74b19b07570f1150daf1ce1888d498f720660e0be78f91515c3d81b" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="5064b0b7687d588d9b93bd57947c3f7cdbfa5bf4eb46fe6fd5c09933983f101c" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="241028e36df9044638fb99e256193e4409f9bbb10f14c5e5e2334147009c8f7f" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="fee9b3b8826caa4348fbd1660442e2603244f1e9655c7a402c3ed6019a913b78" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="716e9be41943d652fd17f3e5524d89906e308d4980aab75e42a5d7896d8150b8" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="c9f0d7fde7ab3952e0ba0343757b60f1477cf62074063cd9f35afeffc3d18032" name="tzdata" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="912e73bd1aa333f61d57a5ef7a34bb8a67c832b28922423b0cad45b256d0f6e8" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="c177d433661e0038169de8bc2376191efafd52a92a4c3775cdae9674ac2c35f5" name="tzdata" arch="src">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="f3dd206595a2476b7e11197263ef695d8844aaae58cbb4b39dc2a89a35ce8d7a" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="42145af24d31ae44e70bb3d2494ed5ac7edc9bfb02cea6a7282a43bc5ddec71d" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="31df6f87d656736d45a72e73191b1f11fc763fc4e3606c5a11a761184c6825e7" name="util-linux" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="d55c27f973b07364689d1b0936f1bfab77a74b819a3d80820e24190b01781cce" name="uuidd" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="05ce8b92cd6eac39377f94bac12dc1fb7c996d9b5177226301ab866bfa5444b5" name="valgrind" arch="ppc64le">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="d95648fca6c47e45bdd94c4c6fa08a4ad0851b12d27730365a399b9cb900502a" name="valgrind-devel" arch="ppc64le">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="b785e591a904fd519237650e268460e0baaa6e2920fb21feda42e4635db926b6" name="valgrind-openmpi" arch="ppc64le">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="bdf6169da0233f1c169153144a25712632d2fddf2aeee46cab5dc507914a2811" name="veritysetup" arch="ppc64le">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="568706b9af09dbca0d14249efd12e8f1bf7f92589e58dd0df1031cdd3c988b7a" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="6.el7_4"/>
  <changelog author="Devan Goodwin &lt;dgoodwin@rm-rf.ca&gt; 0.15-1" date="1438689600">- Update spec for renamed README.md. (dgoodwin@redhat.com)
- Moves fakevirt._decode() to util.decode() (csnyder@redhat.com)
- Adds the report.config.name to log message when refusing to send a report due
  to lack of change (csnyder@redhat.com)
- VirtWho: Clears list of reports on reload (csnyder@redhat.com)
- Revises change detection tests to account for changes in master
  (csnyder@redhat.com)
- Libvirtd: Sends a report on start up, and on events (csnyder@redhat.com)
- Removes trailing line at the end of the file (csnyder@redhat.com)
- Test_Esx: Test Oneshot to ensure it queues a report (csnyder@redhat.com)
- Esx: only queue data if the version has changed (csnyder@redhat.com)
- Test_VirtWho:Patches manager.Manager.fromOptions, removes unnecessary mocks
  (csnyder@redhat.com)
- Removes unhelpful debug log message (csnyder@redhat.com)
- Fix spacing, remove unused imports (csnyder@redhat.com)
- Test_VirtWho: Adds test to show same report will not be sent twice
  (csnyder@redhat.com)
- VirtWho: Adds basic change detection using report hashs (csnyder@redhat.com)
- Adds hash property to config (csnyder@redhat.com)
- Adds hash property to DomainListReport and HypervisorGuestAssociationReport
  (csnyder@redhat.com)
- Hypervisor: Adds getHash class method (csnyder@redhat.com)
- Limits interval settings (wpoteat@redhat.com)
- Retry sending data to subscription manager multiple times before dropping
  (rnovacek@redhat.com)
- SubscriptionManager: nicely order keys in debug report (rnovacek@redhat.com)
- Fix serialization of guest list in print mode (rnovacek@redhat.com)
- Do not exit oneshot mode if any job exists (rnovacek@redhat.com)
- SubscriptionManager: check if report result has failedUpdate item
  (rnovacek@redhat.com)
- SubscriptionManager: minor logging fixes (rnovacek@redhat.com)
- SubscriptionManager: add env var to disable asynchronous reporting
  (rnovacek@redhat.com)
- Check jobs status in increasing interval (rnovacek@redhat.com)
- Esx: report host even if it doesn't have any guests (rnovacek@redhat.com)
- Hypervisors reported by hyperv now include hostname. (csnyder@redhat.com)
- Removes completed jobs. (csnyder@redhat.com)
- Fix output format in print mode (rnovacek@redhat.com)
- Fix using empty list as default parameter value (rnovacek@redhat.com)
- satellite: support new hypervisor format (rnovacek@redhat.com)
- Fix tests failures (rnovacek@redhat.com)
- Removes timeouts for jobs. All jobs in the list are now executed just before
  a new report is sent. (csnyder@redhat.com)
- The virtwho loop now blocks on the report queue with a one second timeout
  (csnyder@redhat.com)
- Removes unnecessary imports and queue (csnyder@redhat.com)
- Rewrite readme to markdown syntax (rnovacek@redhat.com)
- CI: install unittest2 from pypi (rnovacek@redhat.com)
- CI: add -y option to add-apt-repository (rnovacek@redhat.com)
- CI: another attempt on cloud archive for libvirt (rnovacek@redhat.com)
- CI: try to install newer version of libvirt from cloud archive
  (rnovacek@redhat.com)
- CI: add libvirt-dev dependency (rnovacek@redhat.com)
- CI: install libvirt-python via pip (rnovacek@redhat.com)
- CI: another attempt without site-packages (rnovacek@redhat.com)
- CI: install python-rhsm dependencies (rnovacek@redhat.com)
- Adds support for facts in Hypervisor profile. (csnyder@redhat.com)
- Adds count of unchanged mappings to the info logged for the result of an
  async job (csnyder@redhat.com)
- Adds tests for jobs in virtwho, removes unnecessary tests for managerprocess.
  (csnyder@redhat.com)
- Changes to ensure backwards compatibility with python-rhsm
  (csnyder@redhat.com)
- Fixes RhevM.getHostGuestMapping() as suggested by rnovacek
  (csnyder@redhat.com)
- Adds layer to hypervisorId. Removes completed TODO (csnyder@redhat.com)
- Moves all functionality of managerprocess into virtwho. (csnyder@redhat.com)
- CI: use python with system side packages enabled (rnovacek@redhat.com)
- CI: install m2crypto using apt instead of pip (rnovacek@redhat.com)
- CI: install python-libvirt using apt instead of pip (rnovacek@redhat.com)
- Add requirements.txt and .travis.yml for the CI (rnovacek@redhat.com)
- Adds tests to verify the hostGuestAssociation is generated correctly.
  (csnyder@redhat.com)
- Updates libvirtd and tests to add host name to hypervisor profile
  (csnyder@redhat.com)
- Updates managerprocess with better logging and changes for the new tests.~~
  (csnyder@redhat.com)
- Updates to use the new hypervisor class (csnyder@redhat.com)
- print mode: format debug message about found hypervisors
  (rnovacek@redhat.com)
- Removing uncesasary comments (csnyder@redhat.com)
- Removes unused dictionary of jobs and associated methods.
  (csnyder@redhat.com)
- Fixes tests data to include "status" key. (csnyder@redhat.com)
- Updates tests to make use of new Hypervisor class. (csnyder@redhat.com)
- Host name is now included in the hypervisor profile using the new Hypervisor
  class (csnyder@redhat.com)
- Adds new Hypervisor class. (csnyder@redhat.com)
- Adds new test for the updates to subscriptionmanager.py (csnyder@redhat.com)
- Updates fakevirt to make use of virt.Guest classes (csnyder@redhat.com)
- Changes to ensure proper execution post-merge (csnyder@redhat.com)
- Removing more unnecessary prints (csnyder@redhat.com)
- Fixes oneshot mode for work with new managerprocess (csnyder@redhat.com)
- Cleaning up unneeded prints and adding more useful debug log messages
  (csnyder@redhat.com)
- Adds async job status polling for use with the new report API
  (csnyder@redhat.com)
- This (along with python-rhsm/csnyder/new_report_api ee38f15, allows
  communication with new report api (csnyder@redhat.com)</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="73704c853b3948e1511feb6e6e7e3e4fa722d65ab199e8e89da5c78073b6f697" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
</package>
<package pkgid="4493ea53fb4dcbb370be41ce7545ebe58b6ed9741edd2e5dab78d54e58fd80da" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="8.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
</package>
<package pkgid="e1d247e75bfcb8f136f88f38558311e943b05019410b5f09fadd8434184912d9" name="virt-who" arch="src">
  <version epoch="0" ver="0.19" rel="8.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
</package>
<package pkgid="b355bd2c10a731c4c729503f16cb24299ac2df340366c73614ece994cf8a52d0" name="webkitgtk4" arch="ppc64le">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="6b513e0ad4ddf5fbbb19a6a5a20b85e3dfcd3b9af696fdc3662bbe47773635e9" name="webkitgtk4-devel" arch="ppc64le">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="e38da6f6dadacb6bcf75222920199ea83a53594f2beffcfd55525a8783ba0d2f" name="webkitgtk4-doc" arch="noarch">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="c77a6d170b18833b2fe7829fd8829d2e85b031b2349af0470c18b8170e9b1137" name="webkitgtk4-jsc" arch="ppc64le">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="93ce36955d77bc49f62c7e0832613df599cb25804dd42587fad823e827b41966" name="webkitgtk4-jsc-devel" arch="ppc64le">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="42f1aab7ca579dcf4ae7ba87f65a480d908d7bb8e68ec6a87550d8c590253b82" name="webkitgtk4-plugin-process-gtk2" arch="ppc64le">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="fbabf63fb8c771a6ab5ce1e12c8bd431b981111d716ac71b6d875954d45b4560" name="wget" arch="ppc64le">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="53f772693f840ffa2ca931b7276e6479591fdf61e1d062631ba3f122036eb949" name="wpa_supplicant" arch="ppc64le">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="323015a3d2892b69b54de7829e5ac72c63876a602e0997fd1d97dd8146c1ff50" name="xmlsec1" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="e055727af176f7d082627f0b01b4707ea98ef08ceaffb5f49509b596ab5eaa57" name="xmlsec1-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="4a6e90e704d7b537f0beeeca820e9c8978e09ad2a8c6488c32eafb9518689e82" name="xmlsec1-gcrypt" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="a5f1749f3aef212378a78bd3c352ed956e7efcd2a267f1a54d8a974b0a27cf33" name="xmlsec1-gcrypt-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="299d4301bd2e455e16b0311c75809625c79ce8bd38b33220355e5212475f2a61" name="xmlsec1-gnutls" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="29197a62dac557621c260ee9d621d4ae3abc1ceb811143b83101203fd0cb515f" name="xmlsec1-gnutls-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="b48fdb8ba3a7ec69d0bbd68dc2bbe72cb2d3b5fcc3ffbeeb65a13fdfdc3fe817" name="xmlsec1-nss" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="b33b5d81373b39f92877e907f73d7e5ac49f114712ec9cae066336a39df02d24" name="xmlsec1-nss-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="75f72da05cae9faf8944e48908b87d82c9b50da36939bbf83ca6bd37e1ce77d0" name="xmlsec1-openssl" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="d2e3928b4a82b5cab5bb198abc016a9d7b3cffe3eb02b0f144dd2ef22993d4cc" name="xmlsec1-openssl-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="91057adf438958b5420732b99bf11b60f804d37c3e5d3b40509fd8db846e4e1e" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="aabfc5c9f6dbca4806551b2f15625557d4c69cc8a74636d79b45006e91cb44b6" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="f65668c1c2ff43ccb3862af7ccdac3b47e43c4849c147f62f39d639a9612ebdc" name="xorg-x11-server-Xdmx" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="21b38a5203a291044b46f0443ce497d69134d6b6c3ff6e81376b7c3e2ab3195b" name="xorg-x11-server-Xdmx" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="602f1b0823bce46dd332623341c54c2af926ed8ca322d4daf1863658e444e1ca" name="xorg-x11-server-Xephyr" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="5a18f9cb85d3c540c6240462cf6ef219d2a27ab24e04872f7e6f4b3ca93f6093" name="xorg-x11-server-Xephyr" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="61b0a86221444bee91a058515fba3279594acf13fac7d64e7b29cdeca035e21e" name="xorg-x11-server-Xnest" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="d69291cb339ae12983b80fa0da2145e499a10ae1c6c952aebad653ff0c9ee15f" name="xorg-x11-server-Xnest" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="e99fb623478e219aa1147dad1bc2b2b4e0524bba6c353e2b937466fed31cb14e" name="xorg-x11-server-Xorg" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="f93064793007e1a5f2c400fd4a415d893aa40a5bc1c3e6a7917bc4954a652080" name="xorg-x11-server-Xorg" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="e420ef93bf4a5432266db4b08af89fc355e0ac53836a7505f93e941a8f0c5905" name="xorg-x11-server-Xvfb" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="34120ceb0939f593cc3a55e275f29bc2f3e40a0af31d37fed41bbe902e1f30cb" name="xorg-x11-server-Xvfb" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="23d310daccf309f9818242b6e7a7ab49f074ccb096f190507b31786bc7325ddf" name="xorg-x11-server-common" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="69fb4050c8460356ce3188b48b493a4feb4db0b5777200ecfe413b9d377c010e" name="xorg-x11-server-common" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="8858978288d50fbd1674413721b1ed7e9db4e3635823a9e007374226e8b0a4a0" name="xorg-x11-server-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="f435a78b3a3d1421cc94a4d67a09444f34de4eb5b85e03e65f7daa7111288374" name="xorg-x11-server-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="b0b4a448041a603ad19b5bd5af6c6d3d9ef83597912b34fe68a5490bd1d4449e" name="xorg-x11-server-devel" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="68e51eded934bed49725c716e09206b3a2e52e439963c718090ba64086995376" name="xorg-x11-server-devel" arch="ppc64le">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="a6dfad136708807cf1eba407202401b2ff6558589f8d240ab52fea6c8a3b57ee" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="4365a91c74589e762dbdb3eaa9d169c15ee7199744417d3562a136b20894745c" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
</otherdata>