# changelog

author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-9
changelog:
  - Added commented-out "LimitNOFILE=" directive to conman.service.
  - This is systemd-esque way to change process limits for serivces.
  - Also and a comment when to use it.
  - Resolves: rhbz#1035228.


author: Marek Polacek <polacek@redhat.com> 4.8.5-20
changelog:
  - handle exceptions in basic_istream::sentry (#1469384)
  - don't run pr63354.c on ppc (#1468546)
  - ensure proxy privatization safety (#1491395)
  - fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
  - on aarch64, remove libatomic.so (#1465510)


author: Marek Polacek <polacek@redhat.com> 4.8.5-21
changelog:
  - fix 27_io/basic_fstream/53984.cc
  - fix for classes with bases with mutable members (PR c++/77375)
  - fix handling side-effects of parameters (PR c/77767)
  - fix combine's make_extraction (PR rtl-optimization/78378)
  - fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
  - fix -A / -B to A / B folding (PR middle-end/80362)
  - fix comparison of decimal float zeroes (PR middle-end/80692)
  - fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)


author: Jeff Law <law@redhat.com> 4.8.5-24
changelog:
  - Sync gcc48-rh1469697-13 patch to upstream (#1469697)
  - Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
  - Avoid infinite loop if probing interval is less than guard size (#1469697)
  - Fix debug information for large probing interval on aarch64 (#1469697)
  - Fix ICE on ppc port with large probing interval (#1469697)

  - rebuild to remove static relocations not known to older linkers (#1508968)


author: Jeff Law <law@redhat.com> 4.8.5-26
changelog:
  - Avoid red zone probing for zero residual dynamic allocation (#1469697)
  - Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)


author: Marek Polacek <polacek@redhat.com> 4.8.5-28
changelog:
  - Minor testsuite fixes to clean up test results (#1469697)
  - retpoline support for spectre mitigation (#1535655)


author: Florian Weimer <fweimer@redhat.com> - 2.17-215
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504809)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504809)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-221
changelog:
  - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635)
  - i386: Fix unwinding for 32-bit C++ application (#1529982)
  - Reduce thread and dynamic loader stack usage (#1527904)
  - x86-64: Use XSAVE/XSAVEC more often during lazy symbol binding (#1528418)


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-41.el7a]
changelog:
  - [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
  - [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
  - [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
  - [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
  - [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
  - [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
  - [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
  - [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
  - [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
  - [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
  - [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
  - [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
  - [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-42.el7a]
changelog:
  - [net] sched: cbq: create block for q->link.block (Davide Caratti) [1544314]
  - [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
  - [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
  - [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-43.el7a]
changelog:
  - [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
  - [netdrv] ibmvnic: Remove skb->protocol checks in ibmvnic_xmit (Steve Best) [1544017]
  - [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
  - [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
  - [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
  - [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
  - [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
  - [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
  - [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
  - [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
  - [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
  - [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
  - [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-44.el7a]
changelog:
  - [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
  - [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
  - [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
  - [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
  - [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
  - [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
  - [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
  - [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
  - [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
  - [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
  - [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
  - [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
  - [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
  - [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
  - [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
  - [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
  - [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
  - [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-45.el7a]
changelog:
  - [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
  - [redhat] fix rh_get_maintainer.pl (Andrew Jones)
  - [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-46.el7a]
changelog:
  - [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
  - [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
  - [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
  - [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
  - [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
  - [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
  - [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
  - [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
  - [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
  - [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
  - [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
  - [redhat] RHMAINTAINERS: update power management sections (Al Stone)
  - [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
  - [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
  - [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
  - [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
  - [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
  - [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-47.el7a]
changelog:
  - [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-49.el7a]
changelog:
  - [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
  - [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
  - [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]


author: Parag Nemade <pnemade AT redhat DOT com> - 1.6.2-3
changelog:
  - Resolves:rh#650802-[si] stick characters with cursor, while input with si-wijesekera.mim
  - Resolves:rh#651289-zh-cangjie.mim: excessive space after committing Chinese word
  - Drop obsoletes/provides added in f14


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Petr Pisar <ppisar@redhat.com> - 1.70-1
changelog:
  - 1.70 bump (bug #1101251)
  - Regenerate Perl code from timezone sources (bug #1101251)
  - Update time zone data to Olson 2017b (bug #1101251)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


